{"action":"Upgrade yourls/yourls to 1.7.4 or later.","affected":[{"fixed":"1.7.4","introduced":"0"}],"component":"yourls/yourls","cve_ids":["CVE-2019-14537"],"ecosystem":"Packagist","epss":0.06145,"exploited":false,"fixed_versions":["1.7.4"],"ghsa_id":"GHSA-vf23-f26f-mjj9","id":"tcs_01M5KF93EM2YFSR0MG3NT0AFQC","modified_at":"2026-09-10T03:48:41.819173550Z","published_at":"2019-09-23T18:32:02Z","references":["https://osv.dev/vulnerability/GHSA-vf23-f26f-mjj9","https://github.com/YOURLS/YOURLS/security/advisories/GHSA-vf23-f26f-mjj9","https://nvd.nist.gov/vuln/detail/CVE-2019-14537","https://github.com/YOURLS/YOURLS/pull/2542","https://github.com/Wocanilo/CVE-2019-14537","https://github.com/YOURLS/YOURLS","https://github.com/YOURLS/YOURLS/commits/master","https://github.com/YOURLS/YOURLS/releases","https://github.com/advisories/GHSA-vf23-f26f-mjj9","https://security-garage.com/index.php/cves/cve-2019-14537-api-authentication-bypass-via-type-juggling"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-vf23-f26f-mjj9","url":"https://osv.dev/vulnerability/GHSA-vf23-f26f-mjj9"}],"summary":"Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls"}