{"action":"Upgrade symfony/http-foundation to 2.0.19 or later.","affected":[{"fixed":"2.0.19","introduced":"2.0.0"},{"fixed":"2.1.4","introduced":"2.1.0"}],"component":"symfony/http-foundation","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.0.19","2.1.4"],"ghsa_id":"GHSA-vfm6-r2gc-pwww","id":"tcs_01M5KF94GRVR233EJ8AFRH4PEW","modified_at":"2024-12-04T05:41:25.742334Z","published_at":"2024-05-30T00:34:48Z","references":["https://osv.dev/vulnerability/GHSA-vfm6-r2gc-pwww","https://github.com/symfony/http-foundation/commit/5cde5229fc71a19cef2a0a933a18e08e43252f34","https://github.com/symfony/http-foundation/commit/795ac45c188ee2a729db4513e9dfd30b16a0ed35","https://github.com/symfony/symfony/commit/9ce892cf4395e73b136e9b5cd1fae9e91995c93b","https://github.com/symfony/symfony/commit/e5536f0fe10421da7ebbe0071343e94d039dfb97","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/http-foundation/2012-11-29.yaml","https://symfony.com/blog/security-release-symfony-2-0-19-and-2-1-4"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-vfm6-r2gc-pwww","url":"https://osv.dev/vulnerability/GHSA-vfm6-r2gc-pwww"}],"summary":"Symfony2 security issue when the trust proxy mode is enabled"}