{"action":"Upgrade friendsofsymfony/rest-bundle to 1.2.2 or later.","affected":[{"fixed":"1.2.2","introduced":"1.2.0"}],"component":"friendsofsymfony/rest-bundle","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["1.2.2"],"ghsa_id":"GHSA-p9fg-j6ww-953m","id":"tcs_01M5KF67V323Z0Y5GYW8KZM0G8","modified_at":"2024-11-29T05:30:34.898228Z","published_at":"2024-05-15T21:41:09Z","references":["https://osv.dev/vulnerability/GHSA-p9fg-j6ww-953m","https://github.com/FriendsOfSymfony/FOSRestBundle/commit/3dd7d40068360c23366fb4884c5d194c769ec2c1","https://github.com/FriendsOfPHP/security-advisories/blob/master/friendsofsymfony/rest-bundle/2014-01-22-1.yaml","https://github.com/FriendsOfSymfony/FOSRestBundle","https://symfony.com/blog/fosrestbundle-security-issue-with-jsonp-handler"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-p9fg-j6ww-953m","url":"https://osv.dev/vulnerability/GHSA-p9fg-j6ww-953m"}],"summary":"FOSRestBundle issue with broken validation of JSONP callbacks"}