{"action":"Upgrade zenstruck/collection to 0.2.1 or later.","affected":[{"fixed":"0.2.1","introduced":"0"}],"component":"zenstruck/collection","cve_ids":["CVE-2023-37473"],"ecosystem":"Packagist","epss":0.00939,"exploited":false,"fixed_versions":["0.2.1"],"ghsa_id":"GHSA-7xr2-8ff7-6fjq","id":"tcs_01M5KEYHHGSD50HK9RG78Q716P","modified_at":"2026-09-10T03:49:42.631460226Z","published_at":"2023-07-14T21:59:13Z","references":["https://osv.dev/vulnerability/GHSA-7xr2-8ff7-6fjq","https://github.com/zenstruck/collection/security/advisories/GHSA-7xr2-8ff7-6fjq","https://nvd.nist.gov/vuln/detail/CVE-2023-37473","https://github.com/zenstruck/collection/commit/f4b1c488206e1b1581b06fcd331686846f13f19c","https://github.com/zenstruck/collection","https://github.com/zenstruck/collection/releases/tag/v0.2.1"],"severity":{"label":"high","score":8.5},"sources":[{"source":"osv","source_id":"GHSA-7xr2-8ff7-6fjq","url":"https://osv.dev/vulnerability/GHSA-7xr2-8ff7-6fjq"}],"summary":"zenstruck/collection passing callable string to EntityRepository::find() and query()"}