{"action":"Upgrade datadog/dd-trace to 0.30.2 or later.","affected":[{"fixed":"0.30.2","introduced":"0.30.0"}],"component":"datadog/dd-trace","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["0.30.2"],"ghsa_id":"GHSA-qvgg-r6rq-vwfx","id":"tcs_01M5KF7MEEKWRPFG1GSA4Y2P99","modified_at":"2024-11-29T05:40:03.384354Z","published_at":"2024-05-15T18:33:21Z","references":["https://osv.dev/vulnerability/GHSA-qvgg-r6rq-vwfx","https://github.com/DataDog/dd-trace-php/pull/579","https://github.com/DataDog/dd-trace-php/commit/87fc324eb63d533b35464f1dfca946795f2294fd","https://github.com/DataDog/dd-trace-php","https://github.com/DataDog/dd-trace-php/releases/tag/0.30.0","https://github.com/DataDog/dd-trace-php/releases/tag/0.30.2","https://github.com/FriendsOfPHP/security-advisories/blob/master/datadog/dd-trace/2019-09-26-1.yaml"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-qvgg-r6rq-vwfx","url":"https://osv.dev/vulnerability/GHSA-qvgg-r6rq-vwfx"}],"summary":"datadog/dd-trace Circumvents open_basedir INI directive"}