{"action":"Upgrade symfony/intl to 2.7.38 or later.","affected":[{"fixed":"2.7.38","introduced":"2.7.0"},{"fixed":"2.8.31","introduced":"2.8.0"},{"fixed":"3.2.14","introduced":"3.0.0"},{"fixed":"3.3.13","introduced":"3.3.0"}],"component":"symfony/intl","cve_ids":["CVE-2017-16654"],"ecosystem":"Packagist","epss":0.02677,"exploited":false,"fixed_versions":["2.7.38","2.8.31","3.2.14","3.3.13"],"ghsa_id":"GHSA-c49r-8gj6-768r","id":"tcs_01M5KF0J2RSCN6TMHD34VQ4B0V","modified_at":"2024-02-16T08:19:58.700191Z","published_at":"2022-05-14T01:21:16Z","references":["https://osv.dev/vulnerability/GHSA-c49r-8gj6-768r","https://nvd.nist.gov/vuln/detail/CVE-2017-16654","https://github.com/symfony/symfony/pull/24994","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/intl/CVE-2017-16654.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2017-16654.yaml","https://github.com/symfony/symfony","https://lists.debian.org/debian-lts-announce/2019/03/msg00009.html","https://symfony.com/blog/cve-2017-16654-intl-bundle-readers-breaking-out-of-paths","https://symfony.com/cve-2017-16654","https://www.debian.org/security/2018/dsa-4262"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-c49r-8gj6-768r","url":"https://osv.dev/vulnerability/GHSA-c49r-8gj6-768r"}],"summary":"Symfony Directory Traversal"}