{"action":"Upgrade laminas/laminas-diactoros to 2.11.1 or later.","affected":[{"fixed":"2.11.1","introduced":"0"}],"component":"laminas/laminas-diactoros","cve_ids":["CVE-2022-31109"],"ecosystem":"Packagist","epss":0.00796,"exploited":false,"fixed_versions":["2.11.1"],"ghsa_id":"GHSA-8274-h5jp-97vr","id":"tcs_01M5KEYJ07K38EHMJGENPFV6XY","modified_at":"2023-11-08T04:09:26.511397Z","published_at":"2022-07-27T22:05:18Z","references":["https://osv.dev/vulnerability/GHSA-8274-h5jp-97vr","https://github.com/laminas/laminas-diactoros/security/advisories/GHSA-8274-h5jp-97vr","https://nvd.nist.gov/vuln/detail/CVE-2022-31109","https://github.com/laminas/laminas-diactoros/commit/25b11d422c2e5dad868f68619888763b30f91e2d","https://github.com/FriendsOfPHP/security-advisories/blob/master/laminas/laminas-diactoros/CVE-2022-31109.yaml","https://github.com/advisories/GHSA-8274-h5jp-97vr","https://github.com/laminas/laminas-diactoros","https://github.com/laminas/laminas-diactoros/releases/tag/2.11.1","https://portswigger.net/web-security/host-header"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-8274-h5jp-97vr","url":"https://osv.dev/vulnerability/GHSA-8274-h5jp-97vr"}],"summary":"Diactoros before 2.11.1 vulnerable to HTTP Host Header Attack"}