{"action":"Upgrade guzzlehttp/guzzle-services to 1.5.4 or later.","affected":[{"fixed":"1.5.4","introduced":"0"}],"component":"guzzlehttp/guzzle-services","cve_ids":["CVE-2026-53723"],"ecosystem":"Packagist","epss":0.00219,"exploited":false,"fixed_versions":["1.5.4"],"ghsa_id":"GHSA-q8r6-5hfw-5jff","id":"tcs_01M5KF744B61HPYVRN7EJADCEC","modified_at":"2026-07-15T22:00:52.678479845Z","published_at":"2026-06-11T13:05:01Z","references":["https://osv.dev/vulnerability/GHSA-q8r6-5hfw-5jff","https://github.com/guzzle/guzzle-services/security/advisories/GHSA-q8r6-5hfw-5jff","https://nvd.nist.gov/vuln/detail/CVE-2026-53723","https://github.com/FriendsOfPHP/security-advisories/blob/master/guzzlehttp/guzzle-services/CVE-2026-53723.yaml","https://github.com/guzzle/guzzle-services"],"severity":{"label":"medium","score":5.8},"sources":[{"source":"osv","source_id":"GHSA-q8r6-5hfw-5jff","url":"https://osv.dev/vulnerability/GHSA-q8r6-5hfw-5jff"}],"summary":"guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injection via CDATA Terminator"}