{"action":"Upgrade PanelSW.Custom.WiX to 3.15.0-a46 or later.","affected":[{"fixed":"3.15.0-a46","introduced":"0"}],"component":"PanelSW.Custom.WiX","cve_ids":[],"ecosystem":"NuGet","exploited":false,"fixed_versions":["3.15.0-a46"],"ghsa_id":"GHSA-wq88-fq4x-h2pm","id":"tcs_01M5N948WP4XRGRSATW05Z2E66","modified_at":"2024-12-05T05:34:30.717200Z","published_at":"2024-03-25T19:35:53Z","references":["https://osv.dev/vulnerability/GHSA-wq88-fq4x-h2pm","https://github.com/nirbar/wix3/security/advisories/GHSA-wq88-fq4x-h2pm","https://github.com/nirbar/wix3/commit/99e754bbc717c61f18862aefd98c035f5e2f848d","https://github.com/nirbar/wix3"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-wq88-fq4x-h2pm","url":"https://osv.dev/vulnerability/GHSA-wq88-fq4x-h2pm"}],"summary":"WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM"}