{"action":"Upgrade facade/ignition to 1.16.15 or later.","affected":[{"fixed":"1.16.15","introduced":"0"},{"fixed":"2.0.6","introduced":"2.0.0"}],"component":"facade/ignition","cve_ids":["CVE-2021-43996"],"ecosystem":"Packagist","epss":0.01725,"exploited":false,"fixed_versions":["1.16.15","2.0.6"],"ghsa_id":"GHSA-vhrp-8qx4-vr6c","id":"tcs_01M5KF979GVBVDKJ37VC99K7QQ","modified_at":"2024-02-16T08:20:03.825974Z","published_at":"2021-11-19T20:18:20Z","references":["https://osv.dev/vulnerability/GHSA-vhrp-8qx4-vr6c","https://nvd.nist.gov/vuln/detail/CVE-2021-43996","https://github.com/facade/ignition/pull/285","https://github.com/facade/ignition","https://github.com/facade/ignition/compare/1.16.14...1.16.15","https://github.com/facade/ignition/compare/2.0.5...2.0.6"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-vhrp-8qx4-vr6c","url":"https://osv.dev/vulnerability/GHSA-vhrp-8qx4-vr6c"}],"summary":"Incorrect Access Control in Ignition"}