{"action":"Upgrade symfony/symfony to 2.3.19 or later.","affected":[{"fixed":"2.3.19","introduced":"2.0.0"},{"fixed":"2.4.9","introduced":"2.4.0"},{"fixed":"2.5.4","introduced":"2.5.0"}],"component":"symfony/symfony","cve_ids":["CVE-2014-4931"],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.3.19","2.4.9","2.5.4"],"ghsa_id":"GHSA-wfv7-5x33-v22h","id":"tcs_01M5KFA1C7VFG359N82ERGMWZY","modified_at":"2024-05-30T00:41:45.562928Z","published_at":"2024-05-30T00:21:25Z","references":["https://osv.dev/vulnerability/GHSA-wfv7-5x33-v22h","https://github.com/symfony/symfony/commit/06a80fbdbe744ad6f3010479ba64ef5cf35dd9af.patch","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/framework-bundle/CVE-2014-4931.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2014-4931.yaml","https://symfony.com/blog/security-releases-cve-2014-4931-symfony-2-3-18-2-4-8-and-2-5-2-released"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wfv7-5x33-v22h#Packagist/symfony/symfony","url":"https://osv.dev/vulnerability/GHSA-wfv7-5x33-v22h"}],"summary":"Code injection in the way Symfony implements translation caching in FrameworkBundle"}