{"action":"Upgrade auth0/symfony to 5.5.0 or later.","affected":[{"fixed":"5.5.0","introduced":"2.0.2"}],"component":"auth0/symfony","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["5.5.0"],"ghsa_id":"GHSA-7jp2-5h22-m432","id":"tcs_01M5KEY66QT7FE1QJMQX5JY6J2","modified_at":"2026-02-04T04:40:03.331596Z","published_at":"2025-10-01T21:21:34Z","references":["https://osv.dev/vulnerability/GHSA-7jp2-5h22-m432","https://github.com/auth0/symfony/security/advisories/GHSA-7jp2-5h22-m432","https://nvd.nist.gov/vuln/detail/CVE-2025-58769","https://github.com/auth0/symfony/commit/0b6dbd1a7e6ffeebf4cbb08831c9ca9052d2c577","https://github.com/auth0/symfony","https://github.com/auth0/symfony/releases/tag/5.5.0"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"GHSA-7jp2-5h22-m432","url":"https://osv.dev/vulnerability/GHSA-7jp2-5h22-m432"}],"summary":"Auth0 Symfony SDK Does Not Properly Handle File Types in Bulk User Import"}