{"action":"Upgrade doctrine/dbal to 2.0.8 or later.","affected":[{"fixed":"2.0.8","introduced":"2.0.0"},{"fixed":"2.1.2","introduced":"2.1.0"}],"component":"doctrine/dbal","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.0.8","2.1.2"],"ghsa_id":"GHSA-76w8-mqx4-wjrf","id":"tcs_01M5KEXRWA5S0RSPV3EM70R1WV","modified_at":"2024-05-15T18:42:20Z","published_at":"2024-05-15T18:42:20Z","references":["https://osv.dev/vulnerability/GHSA-76w8-mqx4-wjrf","https://github.com/FriendsOfPHP/security-advisories/blob/master/doctrine/dbal/2011-09-25.yaml","https://github.com/doctrine/dbal","https://web.archive.org/web/20130208100252/https://www.doctrine-project.org/blog/dbal-security-2011-1.html"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-76w8-mqx4-wjrf","url":"https://osv.dev/vulnerability/GHSA-76w8-mqx4-wjrf"}],"summary":"Doctrine DBAL SQL injection possibility"}