{"action":"Upgrade francoisjacquet/rosariosis to 10.1 or later.","affected":[{"fixed":"10.1","introduced":"0"}],"component":"francoisjacquet/rosariosis","cve_ids":["CVE-2022-2714"],"ecosystem":"Packagist","epss":0.00888,"exploited":false,"fixed_versions":["10.1"],"ghsa_id":"GHSA-vh4m-mw8w-g4w8","id":"tcs_01M5KF96BHZBD5Y1GND8E6M3FC","modified_at":"2023-11-08T04:08:56.270947Z","published_at":"2022-09-07T00:01:54Z","references":["https://osv.dev/vulnerability/GHSA-vh4m-mw8w-g4w8","https://nvd.nist.gov/vuln/detail/CVE-2022-2714","https://github.com/francoisjacquet/rosariosis/commit/4022954c3f41462bf6225c302a28b0429f6f4df3","https://github.com/francoisjacquet/rosariosis","https://huntr.dev/bounties/430aedac-c7d9-4acb-9bab-bcc0595d9e95"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-vh4m-mw8w-g4w8","url":"https://osv.dev/vulnerability/GHSA-vh4m-mw8w-g4w8"}],"summary":"RosarioSIS before 10.1 vulnerable to Improper Handling of Length Parameter Inconsistency"}