{"action":"Upgrade joomla/archive to 1.1.10 or later.","affected":[{"fixed":"1.1.10","introduced":"0"}],"component":"joomla/archive","cve_ids":["CVE-2021-26028"],"ecosystem":"Packagist","epss":0.01011,"exploited":false,"fixed_versions":["1.1.10"],"ghsa_id":"GHSA-vgwr-773q-7j3c","id":"tcs_01M5KF960KC7BJCGPNE4SRPM4Z","modified_at":"2025-04-03T15:26:49.778732Z","published_at":"2021-03-24T17:58:13Z","references":["https://osv.dev/vulnerability/GHSA-vgwr-773q-7j3c","https://nvd.nist.gov/vuln/detail/CVE-2021-26028","https://github.com/joomla-framework/archive/commit/32c9009a1020d16bc1060c0d06339898b697cf2c","https://developer.joomla.org/security-centre/848-20210308-core-path-traversal-within-joomla-archive-zip-class.html","https://github.com/FriendsOfPHP/security-advisories/blob/master/joomla/archive/CVE-2021-26028.yaml"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vgwr-773q-7j3c","url":"https://osv.dev/vulnerability/GHSA-vgwr-773q-7j3c"}],"summary":"Path Traversal within joomla/archive zip class"}