{"action":"Upgrade socialiteproviders/steam to 3.0 or later.","affected":[{"fixed":"3.0","introduced":"0"}],"component":"socialiteproviders/steam","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["3.0"],"ghsa_id":"GHSA-hhw9-35p2-q2c5","id":"tcs_01M5KF3Q1JYJZQRZV3JNMXZEJN","modified_at":"2024-12-02T05:44:34.357512Z","published_at":"2021-01-29T20:51:30Z","references":["https://osv.dev/vulnerability/GHSA-hhw9-35p2-q2c5","https://github.com/SocialiteProviders/Steam/security/advisories/GHSA-hhw9-35p2-q2c5","https://packagist.org/packages/socialiteproviders/steam"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-hhw9-35p2-q2c5","url":"https://osv.dev/vulnerability/GHSA-hhw9-35p2-q2c5"}],"summary":"Steam Socialite Provider v1 does not correctly validate openid server"}