Packagist/lexik/jwt-authentication-bundle: low
User enumeration in authentication mechanisms
Action: Upgrade lexik/jwt-authentication-bundle to 2.10.7 or later.
composer require lexik/jwt-authentication-bundle:2.10.7composer require lexik/jwt-authentication-bundle:2.11.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.10.7 | - |
| 2.11.0 | 2.11.3 | - |
Fixed versions
| 2.10.7 | 2.11.3 |
Sources
- osv: GHSA-2frx-j9hj-6c65
- https://github.com/lexik/LexikJWTAuthenticationBundle/security/advisories/GHSA-2frx-j9hj-6c65
- https://github.com/lexik/LexikJWTAuthenticationBundle/commit/a175d6dab968d93e96a3e4f80c495435f71d5eb7
- https://github.com/lexik/LexikJWTAuthenticationBundle
published · modified · JSON