{"action":"Upgrade causal/oidc to 2.1.0 or later.","affected":[{"fixed":"2.1.0","introduced":"0"}],"component":"causal/oidc","cve_ids":["CVE-2024-30173"],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.1.0"],"ghsa_id":"GHSA-hhf8-f5w9-g6vh","id":"tcs_01M5KF3NWT7B7CHX2B7D4V404A","modified_at":"2024-04-02T18:41:43.903805Z","published_at":"2024-04-02T18:21:49Z","references":["https://osv.dev/vulnerability/GHSA-hhf8-f5w9-g6vh","https://github.com/FriendsOfPHP/security-advisories/blob/master/causal/oidc/CVE-2024-30173.yaml","https://github.com/xperseguers/t3ext-oidc","https://typo3.org/security/advisory/typo3-ext-sa-2024-002"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-hhf8-f5w9-g6vh","url":"https://osv.dev/vulnerability/GHSA-hhf8-f5w9-g6vh"}],"summary":"OpenID Connect Authentication (oidc) Typo3 extension Authentication Bypass"}