{"action":"Upgrade ezsystems/ezpublish-kernel to 7.5.29 or later.","affected":[{"fixed":"7.5.29","introduced":"7.5.0"}],"component":"ezsystems/ezpublish-kernel","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["7.5.29"],"ghsa_id":"GHSA-xfqg-p48g-hh94","id":"tcs_01M5KFAZSX9DHJ57F4414JGJVK","modified_at":"2026-02-04T03:41:17.912470Z","published_at":"2022-06-02T21:02:00Z","references":["https://osv.dev/vulnerability/GHSA-xfqg-p48g-hh94","https://github.com/ezsystems/ezpublish-kernel/security/advisories/GHSA-xfqg-p48g-hh94","https://github.com/ezsystems/ezpublish-kernel/commit/913fe17281536a91437d94e8267181ae8b57f5d5","https://developers.ibexa.co/security-advisories/ibexa-sa-2022-006-vulnerabilities-in-page-builder-login-and-commerce","https://github.com/ezsystems/ezpublish-kernel","https://issues.ibexa.co/browse/IBX-1755"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-xfqg-p48g-hh94","url":"https://osv.dev/vulnerability/GHSA-xfqg-p48g-hh94"}],"summary":"Login timing attack in ezsystems/ezpublish-kernel"}