{"action":"Upgrade slim/slim to 2.6.0 or later.","affected":[{"fixed":"2.6.0","introduced":"0"}],"component":"slim/slim","cve_ids":["CVE-2015-2171"],"ecosystem":"Packagist","epss":0.02497,"exploited":false,"fixed_versions":["2.6.0"],"ghsa_id":"GHSA-74mf-vjpg-9xh7","id":"tcs_01M5KEXPE45BG767VB7DS18W8K","modified_at":"2024-12-08T05:26:43.196511Z","published_at":"2022-05-17T03:34:17Z","references":["https://osv.dev/vulnerability/GHSA-74mf-vjpg-9xh7","https://nvd.nist.gov/vuln/detail/CVE-2015-2171","https://github.com/slimphp/Slim/issues/1034","https://github.com/slimphp/Slim/commit/9fa651474eb4d3bb0ce40dd5a55c51bb861c2658","https://github.com/FriendsOfPHP/security-advisories/blob/master/slim/slim/CVE-2015-2171.yaml","https://github.com/slimphp/Slim","https://web.archive.org/web/20200229032229/http://www.securityfocus.com/bid/70087","http://seclists.org/fulldisclosure/2015/Mar/16","http://www.slimframework.com/2015/03/01/version-260.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-74mf-vjpg-9xh7","url":"https://osv.dev/vulnerability/GHSA-74mf-vjpg-9xh7"}],"summary":"Slim vulnerable to PHP object injection"}