{"action":"Upgrade auth0/symfony to 5.8.0 or later.","affected":[{"fixed":"5.8.0","introduced":"5.0.0"}],"component":"auth0/symfony","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["5.8.0"],"ghsa_id":"GHSA-ghc5-95c2-vwcv","id":"tcs_01M5KF2S2WZMTQ125VZKDDHWYX","modified_at":"2026-04-03T04:05:14.160135Z","published_at":"2026-04-03T03:44:13Z","references":["https://osv.dev/vulnerability/GHSA-ghc5-95c2-vwcv","https://github.com/auth0/symfony/security/advisories/GHSA-ghc5-95c2-vwcv","https://github.com/auth0/symfony"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-ghc5-95c2-vwcv","url":"https://osv.dev/vulnerability/GHSA-ghc5-95c2-vwcv"}],"summary":"Auth0 Symfony SDK has Insufficient Entropy in Cookie Encryption"}