{"action":"Upgrade mezzio/mezzio-swoole to 3.7.0 or later.","affected":[{"fixed":"3.7.0","introduced":"0"},{"fixed":"4.3.0","introduced":"4.0.0"}],"component":"mezzio/mezzio-swoole","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["3.7.0","4.3.0"],"ghsa_id":"GHSA-c8rp-cgf4-937w","id":"tcs_01M5KF0S9KEEEXXY4HA4MYBAW6","modified_at":"2024-11-28T05:41:33.267197Z","published_at":"2022-07-29T22:26:10Z","references":["https://osv.dev/vulnerability/GHSA-c8rp-cgf4-937w","https://github.com/mezzio/mezzio-swoole/security/advisories/GHSA-c8rp-cgf4-937w","https://github.com/mezzio/mezzio-swoole"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-c8rp-cgf4-937w","url":"https://osv.dev/vulnerability/GHSA-c8rp-cgf4-937w"}],"summary":"mezzio-swoole Applications Using Diactoros Vulnerable to HTTP Host Header Attack"}