{"action":"Upgrade amphp/artax to 1.0.6 or later.","affected":[{"fixed":"2.0.6","introduced":"2"},{"fixed":"1.0.6","introduced":"0"}],"component":"amphp/artax","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.0.6","1.0.6"],"ghsa_id":"GHSA-gm98-g2wf-7c68","id":"tcs_01M5KF2WN08KZCGGWXMKYC4CG3","modified_at":"2024-11-29T05:25:36.860313Z","published_at":"2024-05-15T17:52:00Z","references":["https://osv.dev/vulnerability/GHSA-gm98-g2wf-7c68","https://github.com/amphp/artax/commit/25668b891d2bced567bd69611c7d18b6a93d5fc4","https://github.com/amphp/artax/commit/accdadaf78f7a43305c3a97d6a964bbc550a555d","https://github.com/FriendsOfPHP/security-advisories/blob/master/amphp/artax/2017-05-09.yaml","https://github.com/amphp/artax","https://github.com/amphp/artax/releases/tag/v2.0.6"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-gm98-g2wf-7c68","url":"https://osv.dev/vulnerability/GHSA-gm98-g2wf-7c68"}],"summary":"amphp/artax Cookie leakage to wrong origins and non-restricted cookie acceptance"}