{"action":"Upgrade symfony/http-foundation to 2.3.19 or later.","affected":[{"fixed":"2.3.19","introduced":"2.0.0"},{"fixed":"2.4.9","introduced":"2.4.0"},{"fixed":"2.5.4","introduced":"2.5.0"}],"component":"symfony/http-foundation","cve_ids":["CVE-2014-6061"],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.3.19","2.4.9","2.5.4"],"ghsa_id":"GHSA-h7v2-2qwg-h829","id":"tcs_01M5KF3FGTYMCWSPD9CCDQSB21","modified_at":"2024-05-30T02:26:52.578150Z","published_at":"2024-05-30T00:41:16Z","references":["https://osv.dev/vulnerability/GHSA-h7v2-2qwg-h829","https://github.com/symfony/symfony/pull/11829","https://github.com/symfony/symfony/commit/3b4046e89467dc1fb5e079e377c2cfd4c239f904","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/CVE-2014-6061.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2014-6061.yaml","https://symfony.com/cve-2014-6061"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-h7v2-2qwg-h829","url":"https://osv.dev/vulnerability/GHSA-h7v2-2qwg-h829"}],"summary":"Symfony has a security issue when parsing the Authorization header"}