{"action":"Upgrade showdoc/showdoc to 2.10.4 or later.","affected":[{"fixed":"2.10.4","introduced":"0"}],"component":"showdoc/showdoc","cve_ids":["CVE-2022-1034"],"ecosystem":"Packagist","epss":0.01481,"exploited":false,"fixed_versions":["2.10.4"],"ghsa_id":"GHSA-xp82-jmw8-mjxp","id":"tcs_01M5KFB7AMQKR8ZVNMJPAAC0GE","modified_at":"2023-11-08T04:07:44.740697Z","published_at":"2022-03-23T00:00:23Z","references":["https://osv.dev/vulnerability/GHSA-xp82-jmw8-mjxp","https://nvd.nist.gov/vuln/detail/CVE-2022-1034","https://github.com/star7th/showdoc/commit/bd792a89c0325836fbd64784f4c4117c0171416b","https://github.com/star7th/showdoc","https://huntr.dev/bounties/d205c489-3266-4ac4-acb7-c8ee570887f7"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-xp82-jmw8-mjxp","url":"https://osv.dev/vulnerability/GHSA-xp82-jmw8-mjxp"}],"summary":"Unrestricted Upload of File with Dangerous Type in ShowDoc"}