{"action":"Upgrade passbolt/passbolt_api to 2.7.0 or later.","affected":[{"fixed":"2.7.0","introduced":"0"}],"component":"passbolt/passbolt_api","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.7.0"],"ghsa_id":"GHSA-v86m-j5f7-ccwh","id":"tcs_01M5KF8YTHV9DSGEZ040D8NND4","modified_at":"2024-12-05T05:46:14.632531Z","published_at":"2024-05-20T16:51:20Z","references":["https://osv.dev/vulnerability/GHSA-v86m-j5f7-ccwh","https://github.com/passbolt/passbolt_api/commit/00f0ebe37d78815adee26d5e80cf2250fe878647","https://github.com/FriendsOfPHP/security-advisories/blob/master/passbolt/passbolt_api/2019-02-11-3.yaml","https://github.com/passbolt/passbolt_api","https://www.passbolt.com/incidents/20190211_multiple_vulnerabilities"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"GHSA-v86m-j5f7-ccwh","url":"https://osv.dev/vulnerability/GHSA-v86m-j5f7-ccwh"}],"summary":"Passbolt Api E-mail HTML injection"}