Merge pull request #694 from weaverryan/CVE-2023-41336

Adding CVE-2023-41336
FriendsOfPHP · Sep 11, 2023 · e26be42 · e26be42
2 parents be0976e + df4303f
commit e26be42
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/symfony/ux-autocomplete/CVE-2023-41336.yaml b/symfony/ux-autocomplete/CVE-2023-41336.yaml
@@ -0,0 +1,8 @@
+title: "symfony/ux-autocomplete Prevent injection of invalid entity ids for \"autocomplete\" fields"
+link: https://github.com/symfony/ux-autocomplete/security/advisories/GHSA-4cpv-669c-r79x
+cve: CVE-2023-41336
+branches:
+    2.x:
+        time: 2023-09-11 12:55:00
+        versions: ['<2.11.2']
+reference: composer://symfony/ux-autocomplete