{"action":"Upgrade Umbraco.Headless.Client.Net to 1.5.0 or later.","affected":[{"fixed":"1.5.0","introduced":"0"}],"component":"Umbraco.Headless.Client.Net","cve_ids":[],"ecosystem":"NuGet","exploited":false,"fixed_versions":["1.5.0"],"ghsa_id":"GHSA-mgr7-5782-6jh9","id":"tcs_01M5N8TV99W8NMF8GNGB8EVGST","modified_at":"2025-01-13T16:34:22.700805Z","published_at":"2025-01-13T16:18:39Z","references":["https://osv.dev/vulnerability/GHSA-mgr7-5782-6jh9","https://github.com/reactiveui/refit/security/advisories/GHSA-3hxg-fxwm-8gf7","https://github.com/umbraco/Umbraco.Headless.Client.Net/security/advisories/GHSA-mgr7-5782-6jh9","https://nvd.nist.gov/vuln/detail/CVE-2024-51501","https://github.com/umbraco/Umbraco.Headless.Client.Net"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-mgr7-5782-6jh9","url":"https://osv.dev/vulnerability/GHSA-mgr7-5782-6jh9"}],"summary":"The Umbraco Heartcore headless client library uses a vulnerable Refit dependency package"}