{"action":"Upgrade bytefury/crater to 6.0.0 or later.","affected":[{"fixed":"6.0.0","introduced":"0"}],"component":"bytefury/crater","cve_ids":["CVE-2021-4080"],"ecosystem":"Packagist","epss":0.01474,"exploited":false,"fixed_versions":["6.0.0"],"ghsa_id":"GHSA-wppj-3pjr-9w79","id":"tcs_01M5KFA8SEEC5XFTKGQDMFD3VN","modified_at":"2023-11-08T04:06:48.954727Z","published_at":"2022-01-21T23:55:11Z","references":["https://osv.dev/vulnerability/GHSA-wppj-3pjr-9w79","https://nvd.nist.gov/vuln/detail/CVE-2021-4080","https://github.com/crater-invoice/crater/commit/cdc913d16cf624aee852bc9163a7c6ffc8d1da9d","https://github.com/crater-invoice/crater","https://huntr.dev/bounties/d7453360-baca-4e56-985f-481275fa38db"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-wppj-3pjr-9w79","url":"https://osv.dev/vulnerability/GHSA-wppj-3pjr-9w79"}],"summary":"crater is vulnerable to Unrestricted Upload of File with Dangerous Type"}