{"action":"Upgrade de.averbis.textanalysis:pear-archetype to 2.0.1 or later.","affected":[{"fixed":"2.0.1","introduced":"2.0.0"}],"component":"de.averbis.textanalysis:pear-archetype","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":["2.0.1"],"ghsa_id":"GHSA-j7c3-96rf-jrrp","id":"tcs_01M5N927G9QHEAEP5Y7BRTNXEN","modified_at":"2021-12-16T18:57:47Z","published_at":"2021-12-16T21:01:51Z","references":["https://osv.dev/vulnerability/GHSA-j7c3-96rf-jrrp","https://github.com/averbis/pear-archetype/security/advisories/GHSA-j7c3-96rf-jrrp","https://github.com/averbis/pear-archetype/commit/6815f5981c836ab8c345a6ff54f29e9f4b67f7eb","https://github.com/averbis/pear-archetype"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-j7c3-96rf-jrrp","url":"https://osv.dev/vulnerability/GHSA-j7c3-96rf-jrrp"}],"summary":"Critical vulnerability in log4j may affect generated PEAR projects"}