{"action":"Upgrade symfony/security-http to 5.3.2 or later.","affected":[{"fixed":"5.3.2","introduced":"5.3.0"}],"component":"symfony/security-http","cve_ids":["CVE-2021-32693"],"ecosystem":"Packagist","epss":0.01388,"exploited":false,"fixed_versions":["5.3.2"],"ghsa_id":"GHSA-rfcf-m67m-jcrq","id":"tcs_01M5KF86NNZ43F3G98X1D6XP0P","modified_at":"2026-07-08T06:27:45.620547315Z","published_at":"2021-06-21T17:03:44Z","references":["https://osv.dev/vulnerability/GHSA-rfcf-m67m-jcrq","https://github.com/symfony/symfony/security/advisories/GHSA-rfcf-m67m-jcrq","https://nvd.nist.gov/vuln/detail/CVE-2021-32693","https://github.com/symfony/security-http/commit/6bf4c31219773a558b019ee12e54572174ff8129","https://github.com/symfony/symfony/commit/3084764ad82f29dbb025df19978b9cbc3ab34728","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-http/CVE-2021-32693.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2021-32693.yaml","https://github.com/symfony/security-http","https://symfony.com/blog/cve-2021-32693-authentication-granted-to-all-firewalls-instead-of-just-one","https://symfony.com/cve-2021-32693"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-rfcf-m67m-jcrq","url":"https://osv.dev/vulnerability/GHSA-rfcf-m67m-jcrq"}],"summary":"Authentication granted to all firewalls instead of just one"}