{"action":"Upgrade simplesamlphp/simplesamlphp to 1.18.6 or later.","affected":[{"fixed":"1.18.6","introduced":"0"}],"component":"simplesamlphp/simplesamlphp","cve_ids":["CVE-2020-5301"],"ecosystem":"Packagist","epss":0.00922,"exploited":false,"fixed_versions":["1.18.6"],"ghsa_id":"GHSA-24m3-w8g9-jwpq","id":"tcs_01M5KERGXFVMEZD91FJNNVGSDF","modified_at":"2026-07-08T06:28:13.590085848Z","published_at":"2020-04-22T20:59:44Z","references":["https://osv.dev/vulnerability/GHSA-24m3-w8g9-jwpq","https://github.com/simplesamlphp/simplesamlphp/security/advisories/GHSA-24m3-w8g9-jwpq","https://nvd.nist.gov/vuln/detail/CVE-2020-5301","https://github.com/simplesamlphp/simplesamlphp/commit/47968d26a2fd3ed52da70dc09210921d612ce44e","https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/CVE-2020-5301.yaml","https://github.com/simplesamlphp/simplesamlphp","https://simplesamlphp.org/security/202004-01"],"severity":{"label":"low","score":3},"sources":[{"source":"osv","source_id":"GHSA-24m3-w8g9-jwpq","url":"https://osv.dev/vulnerability/GHSA-24m3-w8g9-jwpq"}],"summary":"Information disclosure of source code in SimpleSAMLphp"}