{"action":"Upgrade shopware/platform to 6.4.3.1 or later.","affected":[{"fixed":"6.4.3.1","introduced":"0"}],"component":"shopware/platform","cve_ids":["CVE-2021-37708"],"ecosystem":"Packagist","epss":0.02359,"exploited":false,"fixed_versions":["6.4.3.1"],"ghsa_id":"GHSA-xh55-2fqp-p775","id":"tcs_01M5KFB25QM677FDQ3GGSTB5E9","modified_at":"2026-09-10T03:49:15.906142580Z","published_at":"2021-08-30T16:14:09Z","references":["https://osv.dev/vulnerability/GHSA-xh55-2fqp-p775","https://github.com/shopware/platform/security/advisories/GHSA-xh55-2fqp-p775","https://nvd.nist.gov/vuln/detail/CVE-2021-37708","https://github.com/shopware/platform/commit/82d8d1995f6ce9054323b2c3522b1b3cf04853aa","https://github.com/shopware/platform"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-xh55-2fqp-p775","url":"https://osv.dev/vulnerability/GHSA-xh55-2fqp-p775"}],"summary":"Command injection in mail agent settings"}