{"action":"Upgrade laravel/framework to 5.8.17 or later.","affected":[{"fixed":"5.8.17","introduced":"0"}],"component":"laravel/framework","cve_ids":["CVE-2020-19316"],"ecosystem":"Packagist","epss":0.02522,"exploited":false,"fixed_versions":["5.8.17"],"ghsa_id":"GHSA-w2pm-r78h-4m7v","id":"tcs_01M5KF9NCMK6ZK4KM3EWF28D8Z","modified_at":"2024-02-19T05:24:32.920369Z","published_at":"2022-01-06T23:13:42Z","references":["https://osv.dev/vulnerability/GHSA-w2pm-r78h-4m7v","https://nvd.nist.gov/vuln/detail/CVE-2020-19316","https://github.com/laravel/framework/commit/44c3feb604944599ad1c782a9942981c3991fa31","https://github.com/laravel/framework","http://www.netbytesec.com/advisories/OSCommandInjectionInLaravelFramework"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-w2pm-r78h-4m7v","url":"https://osv.dev/vulnerability/GHSA-w2pm-r78h-4m7v"}],"summary":"OS Command Injection in Laravel Framework"}