{"action":"Upgrade doctrine/orm to 1.2.4 or later.","affected":[{"fixed":"2.0.3","introduced":"2.0.0"},{"fixed":"1.2.4","introduced":"1.0.0"}],"component":"doctrine/orm","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.0.3","1.2.4"],"ghsa_id":"GHSA-6q9v-4hq6-5m67","id":"tcs_01M5KEX9F4T8YWZRYQX121RN0R","modified_at":"2024-05-15T20:14:15Z","published_at":"2024-05-15T20:14:15Z","references":["https://osv.dev/vulnerability/GHSA-6q9v-4hq6-5m67","https://github.com/FriendsOfPHP/security-advisories/blob/master/doctrine/orm/2011-09-25.yaml","https://github.com/doctrine/orm","https://web.archive.org/web/20120315064147/https://www.doctrine-project.org/blog/doctrine-security-fix.html"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-6q9v-4hq6-5m67","url":"https://osv.dev/vulnerability/GHSA-6q9v-4hq6-5m67"}],"summary":"Doctrine SQL injection vulnerability"}