Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/07/10 2:32 p.m.•42 views

API Platform Core vulnerable to cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate

Impact ApiPropertysecurity: ... is evaluated per request to decide whether a property is exposed. The componentsCache arrays in ApiPlatform\JsonApi\Serializer\ItemNormalizer and ApiPlatform\Hal\Serializer\ItemNormalizer are keyed on $context'cachekey', which is set unconditionally before delegati...

5.9CVSS6.1AI score0.00315EPSS
SaveExploits0References3Affected Software3
Rows per page
Query Builder