{"action":"Upgrade cachethq/cachet to 2.5.1 or later.","affected":[{"fixed":"2.5.1","introduced":"0"}],"component":"cachethq/cachet","cve_ids":["CVE-2021-39173"],"ecosystem":"Packagist","epss":0.02362,"exploited":false,"fixed_versions":["2.5.1"],"ghsa_id":"GHSA-r67m-m8c7-jp83","id":"tcs_01M5KF7YHJ20ZMH26G0FF5K4R2","modified_at":"2026-07-08T06:27:35.540114512Z","published_at":"2021-08-30T16:11:33Z","references":["https://osv.dev/vulnerability/GHSA-r67m-m8c7-jp83","https://github.com/fiveai/Cachet/security/advisories/GHSA-r67m-m8c7-jp83","https://nvd.nist.gov/vuln/detail/CVE-2021-39173","https://blog.sonarsource.com/cachet-code-execution-via-laravel-configuration-injection","https://github.com/fiveai/Cachet","https://github.com/fiveai/Cachet/releases/tag/v2.5.1"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-r67m-m8c7-jp83","url":"https://osv.dev/vulnerability/GHSA-r67m-m8c7-jp83"}],"summary":"Cachet vulnerable to forced reinstall"}