{"action":"Upgrade laravel/socialite to 2.0.9 or later.","affected":[{"fixed":"2.0.9","introduced":"1.0.0"}],"component":"laravel/socialite","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.0.9"],"ghsa_id":"GHSA-h97c-qp24-439v","id":"tcs_01M5KF3HVYQ5SARHDZP1VZ7MB2","modified_at":"2024-11-29T05:41:25.637005Z","published_at":"2024-05-15T22:27:23Z","references":["https://osv.dev/vulnerability/GHSA-h97c-qp24-439v","https://github.com/laravel/socialite/pull/91","https://github.com/laravel/socialite/commit/2ef13bae1484c44ede68e05486bce76cc0fa8dd8","https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/socialite/2015-07-23.yaml","https://github.com/laravel/socialite"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-h97c-qp24-439v","url":"https://osv.dev/vulnerability/GHSA-h97c-qp24-439v"}],"summary":"Insecure State Generation in laravel/socialite"}