{"action":"Upgrade privatebin/privatebin to 1.7.4 or later.","affected":[{"fixed":"1.7.4","introduced":"1.5.0"}],"component":"privatebin/privatebin","cve_ids":["CVE-2024-39899"],"ecosystem":"Packagist","epss":0.00627,"exploited":false,"fixed_versions":["1.7.4"],"ghsa_id":"GHSA-mqqj-fx8h-437j","id":"tcs_01M5KF5S1TDPYV2CTZGTRT254X","modified_at":"2026-09-10T03:50:16.810819748Z","published_at":"2024-07-10T14:25:23Z","references":["https://osv.dev/vulnerability/GHSA-mqqj-fx8h-437j","https://github.com/PrivateBin/PrivateBin/security/advisories/GHSA-mqqj-fx8h-437j","https://nvd.nist.gov/vuln/detail/CVE-2024-39899","https://github.com/PrivateBin/PrivateBin/pull/1370","https://github.com/PrivateBin/PrivateBin/commit/0c4e810e6728f67d678458838d8430dfba4fcca4","https://github.com/PrivateBin/PrivateBin"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-mqqj-fx8h-437j","url":"https://osv.dev/vulnerability/GHSA-mqqj-fx8h-437j"}],"summary":"PrivateBin allows shortening of URLs for other domains"}