{"action":"Upgrade wintercms/winter to 1.0.475 or later.","affected":[{"fixed":"1.0.475","introduced":"0"},{"fixed":"1.1.9","introduced":"1.1.0"}],"component":"wintercms/winter","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.0.475","1.1.9"],"ghsa_id":"GHSA-q37h-jhf3-85cj","id":"tcs_01M5KF6VCBCPH8EKPTF8410HQF","modified_at":"2024-12-08T05:33:00.377046Z","published_at":"2022-07-15T21:37:28Z","references":["https://osv.dev/vulnerability/GHSA-q37h-jhf3-85cj","https://github.com/wintercms/winter/security/advisories/GHSA-q37h-jhf3-85cj","https://github.com/wintercms/winter"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-q37h-jhf3-85cj","url":"https://osv.dev/vulnerability/GHSA-q37h-jhf3-85cj"}],"summary":"Bypass of CMS Safe Mode Security Feature"}