{"action":"Upgrade symfony/symfony to 2.7.51 or later.","affected":[{"fixed":"2.7.51","introduced":"2.7.0"},{"fixed":"2.8.50","introduced":"2.8.0"},{"fixed":"3.4.26","introduced":"3.0.0"},{"fixed":"4.1.12","introduced":"4.0.0"},{"fixed":"4.2.7","introduced":"4.2.0"}],"component":"symfony/symfony","cve_ids":["CVE-2019-10910"],"ecosystem":"Packagist","epss":0.06024,"exploited":false,"fixed_versions":["2.7.51","2.8.50","3.4.26","4.1.12","4.2.7"],"ghsa_id":"GHSA-pgwj-prpq-jpc2","id":"tcs_01M5KF6C4BK7V2Q6559TMN4E44","modified_at":"2025-05-29T23:25:27.652851Z","published_at":"2019-11-18T17:27:31Z","references":["https://osv.dev/vulnerability/GHSA-pgwj-prpq-jpc2","https://nvd.nist.gov/vuln/detail/CVE-2019-10910","https://github.com/symfony/symfony/commit/3876c75f858d5d82e2c309698d21af2f1d721afb","https://github.com/symfony/symfony/commit/4c80c3444854ef384df94deb4acbcef4b5e5243b","https://github.com/symfony/symfony/commit/d2fb5893923292a1da7985f0b56960b5bb10737b","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/dependency-injection/CVE-2019-10910.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/proxy-manager-bridge/CVE-2019-10910.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2019-10910.yaml","https://github.com/symfony/symfony","https://symfony.com/blog/cve-2019-10910-check-service-ids-are-valid","https://symfony.com/cve-2019-10910","https://www.synology.com/security/advisory/Synology_SA_19_19"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-pgwj-prpq-jpc2#Packagist/symfony/symfony","url":"https://osv.dev/vulnerability/GHSA-pgwj-prpq-jpc2"}],"summary":"Symfony Service IDs Allow Injection"}