{"action":"Upgrade symfony/security-http to 5.2.8 or later.","affected":[{"fixed":"5.2.8","introduced":"5.1.0"}],"component":"symfony/security-http","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["5.2.8"],"ghsa_id":"GHSA-g2qj-pmxm-9f8f","id":"tcs_01M5KF26SDGG1YHTJVPNFSAAZA","modified_at":"2024-12-02T05:54:32.867077Z","published_at":"2021-05-17T20:52:32Z","references":["https://osv.dev/vulnerability/GHSA-g2qj-pmxm-9f8f","https://github.com/symfony/symfony/security/advisories/GHSA-g2qj-pmxm-9f8f","https://github.com/symfony/symfony/commit/2a581d22cc621b33d5464ed65c4bc2057f72f011","https://github.com/symfony/symfony"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-g2qj-pmxm-9f8f","url":"https://osv.dev/vulnerability/GHSA-g2qj-pmxm-9f8f"}],"summary":"User enumeration in authentication mechanisms"}