{"action":"Upgrade org.openmrs.module:attachments to 3.6.0 or later.","affected":[{"fixed":"3.6.0","introduced":"0"}],"component":"org.openmrs.module:attachments","cve_ids":[],"ecosystem":"Maven","exploited":false,"fixed_versions":["3.6.0"],"ghsa_id":"GHSA-vpxm-cr3r-pjp9","id":"tcs_01M5N9EJFY5098SKFR4V8ZF4D6","modified_at":"2025-01-30T17:50:52Z","published_at":"2025-01-30T17:50:52Z","references":["https://osv.dev/vulnerability/GHSA-vpxm-cr3r-pjp9","https://github.com/openmrs/openmrs-core/security/advisories/GHSA-vpxm-cr3r-pjp9","https://github.com/openmrs/openmrs-core"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-vpxm-cr3r-pjp9#Maven/org.openmrs.module:attachments","url":"https://osv.dev/vulnerability/GHSA-vpxm-cr3r-pjp9"}],"summary":"General OpenMRS Security Advisory, January 2025: Penetration Testing Results and Patches"}