All products

api-platform/json-api

Composer · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
API Platform Core vulnerable to cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gateCVE-2026-49858 · GHSA-PJHX-3C3W-9V23 api-platform/coreapi-platform/hal Composer Medium Fix reported