{"action":"Upgrade aimeos/ai-client-html to 2021.10.22 or later.","affected":[{"fixed":"2024.04.7","introduced":"2024.04.1"},{"fixed":"2023.10.15","introduced":"2023.04.1"},{"fixed":"2022.10.13","introduced":"2022.04.1"},{"fixed":"2021.10.22","introduced":"2021.10.1"}],"component":"aimeos/ai-client-html","cve_ids":["CVE-2024-38516"],"ecosystem":"Packagist","epss":0.0051,"exploited":false,"fixed_versions":["2024.04.7","2023.10.15","2022.10.13","2021.10.22"],"ghsa_id":"GHSA-ppm5-jv84-2xg2","id":"tcs_01M5KF6J99HBN5PSBRW42ZMKKB","modified_at":"2026-09-10T03:50:15.752956387Z","published_at":"2024-06-25T17:26:56Z","references":["https://osv.dev/vulnerability/GHSA-ppm5-jv84-2xg2","https://github.com/aimeos/ai-client-html/security/advisories/GHSA-ppm5-jv84-2xg2","https://nvd.nist.gov/vuln/detail/CVE-2024-38516","https://github.com/aimeos/ai-client-html/commit/bb389620ffc3cf4a2f29c11a1e5f512049e0c132","https://github.com/aimeos/ai-client-html"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-ppm5-jv84-2xg2","url":"https://osv.dev/vulnerability/GHSA-ppm5-jv84-2xg2"}],"summary":"Aimeos HTML client may potentially reveal sensitive information in error log"}