{"action":"Upgrade symfony/security to 2.3.41 or later.","affected":[{"fixed":"2.3.41","introduced":"2.3.0"},{"fixed":"2.7.13","introduced":"2.4.0"},{"fixed":"2.8.6","introduced":"2.8.0"},{"fixed":"3.0.6","introduced":"3.0.0"}],"component":"symfony/security","cve_ids":["CVE-2016-4423"],"ecosystem":"Packagist","epss":0.01862,"exploited":false,"fixed_versions":["2.3.41","2.7.13","2.8.6","3.0.6"],"ghsa_id":"GHSA-whgv-8cg3-7hcm","id":"tcs_01M5KFA3RJ2J92VRT150TW7X5P","modified_at":"2024-12-08T05:43:41.795128Z","published_at":"2022-05-17T03:54:47Z","references":["https://osv.dev/vulnerability/GHSA-whgv-8cg3-7hcm","https://nvd.nist.gov/vuln/detail/CVE-2016-4423","https://github.com/symfony/symfony/pull/18733","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security-http/CVE-2016-4423.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/security/CVE-2016-4423.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/symfony/symfony/CVE-2016-4423.yaml","https://github.com/symfony/symfony","https://symfony.com/blog/cve-2016-4423-large-username-storage-in-session","https://symfony.com/cve-2016-4423","http://www.debian.org/security/2016/dsa-3588"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-whgv-8cg3-7hcm#Packagist/symfony/security","url":"https://osv.dev/vulnerability/GHSA-whgv-8cg3-7hcm"}],"summary":"Symphony Denial of Service Via Overlong Usernames"}