{"action":"Upgrade symfony/symfony to 2.8.50 or later.","affected":[{"fixed":"2.8.50","introduced":"2.8.0"},{"fixed":"3.4.26","introduced":"3.0.0"},{"fixed":"4.1.12","introduced":"4.0.0"},{"fixed":"4.2.7","introduced":"4.2.0"}],"component":"symfony/symfony","cve_ids":["CVE-2019-10912"],"ecosystem":"Packagist","epss":0.0226,"exploited":false,"fixed_versions":["2.8.50","3.4.26","4.1.12","4.2.7"],"ghsa_id":"GHSA-w2fr-65vp-mxw3","id":"tcs_01M5KF9MHXRYRACQA0ZPMS11TB","modified_at":"2024-03-13T05:31:53.452950Z","published_at":"2020-02-12T18:44:50Z","references":["https://osv.dev/vulnerability/GHSA-w2fr-65vp-mxw3","https://nvd.nist.gov/vuln/detail/CVE-2019-10912","https://github.com/symfony/symfony/commit/4fb975281634b8d49ebf013af9e502e67c28816b","https://www.debian.org/security/2019/dsa-4441","https://typo3.org/security/advisory/typo3-core-sa-2019-016","https://symfony.com/cve-2019-10912","https://symfony.com/blog/cve-2019-10912-prevent-destructors-with-side-effects-from-being-unserialized","https://seclists.org/bugtraq/2019/May/21","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLOZX5BZMQKWG7PJRQL6MB5CAMKBQAWD","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RTJGZJLPG5FHKFH7KNAKNTWOGBB6LXAL","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDSM576XIOVXVCMHNJHLBBZBTOD62LDA","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LFARAUAWZE4UDSKVDWRD35D75HI5UGSD","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BHHIG4GMSGEIDT3RITSW7GJ5NT6IBHXU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BAC2TQVEEH5FDJSSWPM2BCRIPTCOEMMO","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QEAOZXVNDA63537A2OIH4QE77EKZR5O","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/42UEKSLKJB72P24JBWVN6AADHLMYSUQD","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLOZX5BZMQKWG7PJRQL6MB5CAMKBQAWD","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTJGZJLPG5FHKFH7KNAKNTWOGBB6LXAL","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MDSM576XIOVXVCMHNJHLBBZBTOD62LDA","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LFARAUAWZE4UDSKVDWRD35D75HI5UGSD","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BHHIG4GMSGEIDT3RITSW7GJ5NT6IBHXU","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BAC2TQVEEH5FDJSSWPM2BCRIPTCOEMMO","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QEAOZXVNDA63537A2OIH4QE77EKZR5O","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42UEKSLKJB72P24JBWVN6AADHLMYSUQD","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/CVE-2019-10912.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/CVE-2019-10912.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2019-10912.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/phpunit-bridge/CVE-2019-10912.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/cache/CVE-2019-10912.yaml"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-w2fr-65vp-mxw3#Packagist/symfony/symfony","url":"https://osv.dev/vulnerability/GHSA-w2fr-65vp-mxw3"}],"summary":"Deserialization of untrusted data in Symfony"}