{"action":"Upgrade james-heinrich/getid3 to 1.9.21 or later.","affected":[{"fixed":"1.9.21","introduced":"1.0.0"}],"component":"james-heinrich/getid3","cve_ids":["CVE-2021-40926"],"ecosystem":"Packagist","epss":0.01008,"exploited":false,"fixed_versions":["1.9.21"],"ghsa_id":"GHSA-x2gw-85w6-fjjw","id":"tcs_01M5KFAH9EBJH82W2ZQV3RYE13","modified_at":"2023-11-08T04:06:49.932492Z","published_at":"2021-10-04T20:13:55Z","references":["https://osv.dev/vulnerability/GHSA-x2gw-85w6-fjjw","https://nvd.nist.gov/vuln/detail/CVE-2021-40926","https://github.com/JamesHeinrich/getID3/issues/341","https://github.com/JamesHeinrich/getID3/pull/342","https://github.com/JamesHeinrich/getID3","https://github.com/JamesHeinrich/getID3/releases/tag/v1.9.21"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-x2gw-85w6-fjjw","url":"https://osv.dev/vulnerability/GHSA-x2gw-85w6-fjjw"}],"summary":"Cross-site scripting in demos/demo.mysqli.php in getID3"}