{"id":"GHSA-vjrg-wpm8-rhrw","summary":"doctrine/orm Regression in Query Parenthesis can have Security Implications","details":"An issue identified in doctrine/orm project related to statement in Where-Clause were not wrapped in brackets due to improper hadandling of case insensitive check.","modified":"2024-11-29T05:42:43.555345Z","published":"2024-05-15T20:19:47Z","database_specific":{"github_reviewed_at":"2024-05-15T20:19:47Z","nvd_published_at":null,"cwe_ids":[],"severity":"HIGH","github_reviewed":true},"references":[{"type":"WEB","url":"https://github.com/doctrine/orm/pull/8591"},{"type":"WEB","url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/doctrine/orm/2021-04-06.yaml"},{"type":"PACKAGE","url":"https://github.com/doctrine/orm"}],"affected":[{"package":{"name":"doctrine/orm","ecosystem":"Packagist","purl":"pkg:composer/doctrine/orm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.8.3"},{"fixed":"2.8.4"}]}],"versions":["2.8.3"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/05/GHSA-vjrg-wpm8-rhrw/GHSA-vjrg-wpm8-rhrw.json"}}],"schema_version":"1.9.0"}