{"action":"Upgrade ezsystems/ezplatform-kernel to 1.3.17 or later.","affected":[{"fixed":"1.3.17","introduced":"1.3.0"}],"component":"ezsystems/ezplatform-kernel","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.3.17"],"ghsa_id":"GHSA-w8qp-hmh5-4v9v","id":"tcs_01M5KF9XGJXACV1SG4R55FRBW4","modified_at":"2025-08-06T15:45:44.409129Z","published_at":"2022-04-29T16:22:58Z","references":["https://osv.dev/vulnerability/GHSA-w8qp-hmh5-4v9v","https://github.com/ezsystems/ezplatform-kernel/security/advisories/GHSA-w8qp-hmh5-4v9v","https://developers.ibexa.co/security-advisories/ibexa-sa-2022-004-ineffective-object-state-limitation-and-unauthenticated-fastly-purge","https://github.com/ezsystems/ezplatform-kernel"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-w8qp-hmh5-4v9v","url":"https://osv.dev/vulnerability/GHSA-w8qp-hmh5-4v9v"}],"summary":"Object state limitation has no effect"}