{"action":"Upgrade ghost to 4.15.0 or later.","affected":[{"fixed":"4.15.0","introduced":"0"}],"component":"ghost","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["4.15.0"],"ghsa_id":"GHSA-wfrj-qqc2-83cm","id":"tcs_01M5KGEY328STGQN5H5F4KYXS0","modified_at":"2021-09-17T17:48:56Z","published_at":"2021-09-20T19:52:41Z","references":["https://osv.dev/vulnerability/GHSA-wfrj-qqc2-83cm","https://github.com/TryGhost/Ghost/security/advisories/GHSA-wfrj-qqc2-83cm","https://github.com/TryGhost/Ghost/commit/93e4b2eafd18bc8e4c17924e0824e73617e7940c","https://github.com/TryGhost/Ghost","https://github.com/advisories/GHSA-48ww-j4fc-435p"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GHSA-wfrj-qqc2-83cm","url":"https://osv.dev/vulnerability/GHSA-wfrj-qqc2-83cm"}],"summary":"Remote command injection when using sendmail email transport"}