{"action":"Upgrade monolog/monolog to 1.12.0 or later.","affected":[{"fixed":"1.12.0","introduced":"1.8.0"}],"component":"monolog/monolog","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.12.0"],"ghsa_id":"GHSA-f57v-q966-7fh6","id":"tcs_01M5KF1F784P9AHB2HWEA8DXSK","modified_at":"2024-11-29T05:40:52.145864Z","published_at":"2024-05-15T23:08:13Z","references":["https://osv.dev/vulnerability/GHSA-f57v-q966-7fh6","https://github.com/Seldaek/monolog/issues/458","https://github.com/Seldaek/monolog/pull/448#issuecomment-68208704","https://github.com/Seldaek/monolog/commit/515a096c864b00b3967f7f601680f85d4a2e4001","https://github.com/FriendsOfPHP/security-advisories/blob/master/monolog/monolog/2014-12-29-1.yaml","https://github.com/Seldaek/monolog"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-f57v-q966-7fh6","url":"https://osv.dev/vulnerability/GHSA-f57v-q966-7fh6"}],"summary":"Monolog Header injection in NativeMailerHandler"}