{"action":"Upgrade matyhtf/framework to 3.0.6 or later.","affected":[{"fixed":"3.0.6","introduced":"0"}],"component":"matyhtf/framework","cve_ids":["CVE-2021-43676"],"ecosystem":"Packagist","epss":0.01426,"exploited":false,"fixed_versions":["3.0.6"],"ghsa_id":"GHSA-mh9j-v6mq-pfch","id":"tcs_01M5KF5JW9F1AVP2EMSXZK1X64","modified_at":"2026-07-20T21:29:20Z","published_at":"2021-12-04T00:00:53Z","references":["https://osv.dev/vulnerability/GHSA-mh9j-v6mq-pfch","https://nvd.nist.gov/vuln/detail/CVE-2021-43676","https://github.com/matyhtf/framework/issues/206","https://github.com/matyhtf/framework/commit/25084603b7ea771eebe263d39744fe6abf1f8d61","https://github.com/FriendsOfPHP/security-advisories/blob/master/matyhtf/framework/CVE-2021-43676.yaml","https://github.com/advisories/GHSA-mh9j-v6mq-pfch","https://github.com/matyhtf/framework"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-mh9j-v6mq-pfch","url":"https://osv.dev/vulnerability/GHSA-mh9j-v6mq-pfch"}],"summary":"Path manipulation in matyhtf/framework"}