{"action":"Upgrade bref/bref to 2.1.13 or later.","affected":[{"fixed":"2.1.13","introduced":"0"}],"component":"bref/bref","cve_ids":["CVE-2024-24754"],"ecosystem":"Packagist","epss":0.00618,"exploited":false,"fixed_versions":["2.1.13"],"ghsa_id":"GHSA-82vx-mm6r-gg8w","id":"tcs_01M5KEYJWTWR0XPVDH8NWMAHXY","modified_at":"2026-09-10T03:50:05.466188695Z","published_at":"2024-02-01T22:47:29Z","references":["https://osv.dev/vulnerability/GHSA-82vx-mm6r-gg8w","https://github.com/brefphp/bref/security/advisories/GHSA-82vx-mm6r-gg8w","https://nvd.nist.gov/vuln/detail/CVE-2024-24754","https://github.com/brefphp/bref/commit/c77d9f5abf021f29fa96b5720b7b84adbd199092","https://github.com/brefphp/bref","https://github.com/brefphp/bref/blob/2.1.12/src/Event/Http/Psr7Bridge.php#L130-L168"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-82vx-mm6r-gg8w","url":"https://osv.dev/vulnerability/GHSA-82vx-mm6r-gg8w"}],"summary":"Bref vulnerable to Body Parsing Inconsistency in Event-Driven Functions"}