{"action":"Upgrade httpsoft/http-message to 1.0.12 or later.","affected":[{"fixed":"1.0.12","introduced":"0"}],"component":"httpsoft/http-message","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.0.12"],"ghsa_id":"GHSA-9jxr-mwpp-w643","id":"tcs_01M5KF056BX0F7AV054FRGETMT","modified_at":"2024-12-06T05:39:27.356128Z","published_at":"2023-04-21T20:27:12Z","references":["https://osv.dev/vulnerability/GHSA-9jxr-mwpp-w643","https://github.com/guzzle/psr7/security/advisories/GHSA-wxmh-65f7-jcvw","https://github.com/httpsoft/http-message/security/advisories/GHSA-9jxr-mwpp-w643","https://nvd.nist.gov/vuln/detail/CVE-2023-29197","https://github.com/httpsoft/http-message"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-9jxr-mwpp-w643","url":"https://osv.dev/vulnerability/GHSA-9jxr-mwpp-w643"}],"summary":"Improper header validation in httpsoft/http-message"}