{"action":"Upgrade phoenix-ws to 1.0.6 or later.","affected":[{"fixed":"1.0.6","introduced":"0"}],"component":"phoenix-ws","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["1.0.6"],"ghsa_id":"GHSA-c8f7-x2g7-7fxj","id":"tcs_01M5KFCH4S0JYWVXD1Z6SA66BE","modified_at":"2024-12-03T06:03:05.663847Z","published_at":"2022-06-02T14:23:29Z","references":["https://osv.dev/vulnerability/GHSA-c8f7-x2g7-7fxj","https://github.com/Froggo8311/Phoenix/security/advisories/GHSA-c8f7-x2g7-7fxj","https://github.com/Froggo8311/Phoenix"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-c8f7-x2g7-7fxj","url":"https://osv.dev/vulnerability/GHSA-c8f7-x2g7-7fxj"}],"summary":"Phoenix-ws source code and data in extensions folder is publicly available"}