{"action":"Upgrade billz/raspap-webgui to 3.1.0 or later.","affected":[{"fixed":"3.1.0","introduced":"0"}],"component":"billz/raspap-webgui","cve_ids":["CVE-2024-28754"],"ecosystem":"Packagist","epss":0.00856,"exploited":false,"fixed_versions":["3.1.0"],"ghsa_id":"GHSA-vc9f-mgxr-h32r","id":"tcs_01M5KF927R5KEB7YEVVQV42B8H","modified_at":"2024-12-02T05:27:37.807685Z","published_at":"2024-03-09T00:31:14Z","references":["https://osv.dev/vulnerability/GHSA-vc9f-mgxr-h32r","https://nvd.nist.gov/vuln/detail/CVE-2024-28754","https://github.com/RaspAP/raspap-webgui/pull/1546","https://github.com/RaspAP/raspap-webgui/pull/1548","https://github.com/RaspAP/raspap-webgui/commit/d0592b63de9a5da587ab3a51e03e7e566c7f3602","https://dustri.org/b/carrot-disclosure.html","https://github.com/RaspAP/raspap-webgui"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-vc9f-mgxr-h32r","url":"https://osv.dev/vulnerability/GHSA-vc9f-mgxr-h32r"}],"summary":"raspap-webgui vulnerable to denial of service"}