{"action":"Upgrade lexik/jwt-authentication-bundle to 2.10.7 or later.","affected":[{"fixed":"2.10.7","introduced":"0"},{"fixed":"2.11.3","introduced":"2.11.0"}],"component":"lexik/jwt-authentication-bundle","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.10.7","2.11.3"],"ghsa_id":"GHSA-2frx-j9hj-6c65","id":"tcs_01M5KERY2NN84F4Z4TDNGPN6P3","modified_at":"2024-12-02T05:54:53.242476Z","published_at":"2021-05-17T20:52:21Z","references":["https://osv.dev/vulnerability/GHSA-2frx-j9hj-6c65","https://github.com/lexik/LexikJWTAuthenticationBundle/security/advisories/GHSA-2frx-j9hj-6c65","https://github.com/lexik/LexikJWTAuthenticationBundle/commit/a175d6dab968d93e96a3e4f80c495435f71d5eb7","https://github.com/lexik/LexikJWTAuthenticationBundle"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-2frx-j9hj-6c65","url":"https://osv.dev/vulnerability/GHSA-2frx-j9hj-6c65"}],"summary":"User enumeration in authentication mechanisms"}