{"id":"GHSA-vjrg-wpm8-rhrw","aliases":[],"title":"doctrine/orm Regression in Query Parenthesis can have Security Implications","description":"An issue identified in doctrine/orm project related to statement in Where-Clause were not wrapped in brackets due to improper hadandling of case insensitive check.","severity":"high","score":null,"published":"2024-05-15T20:19:47.000Z","modified":"2024-11-29T05:42:43.555Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"doctrine/orm","ranges":[{"events":[{"introduced":"2.8.3"},{"fixed":"2.8.4"}],"type":"ECOSYSTEM"}],"versions":["2.8.3"],"fixed":["2.8.4"]}],"references":["https://github.com/doctrine/orm/pull/8591","https://github.com/FriendsOfPHP/security-advisories/blob/master/doctrine/orm/2021-04-06.yaml","https://github.com/doctrine/orm"],"sources":[{"name":"OSV","id":"GHSA-vjrg-wpm8-rhrw","modified":"2024-11-29T05:42:43.555345Z","url":"https://osv.dev/vulnerability/GHSA-vjrg-wpm8-rhrw"}],"assessments":[]}