GitHub Advisoryadvisory · Packagist

GHSA-vjrg-wpm8-rhrw doctrine/orm Regression in Query Parenthesis can have Security Implications

HIGH Published 2024-05-15 Modified 2024-05-15 Official page ↗

Ecosystem: Packagist
Packages: doctrine/orm
Severity: High
Reviewed: 2024-05-15

Affected packages

• Packagist doctrine/orm: >= 2.8.3, < 2.8.4 → fixed in 2.8.4

Description

An issue identified in doctrine/orm project related to statement in Where-Clause were not wrapped in brackets due to improper hadandling of case insensitive check.

References

https://github.com/doctrine/orm/pull/8591 web
https://github.com/FriendsOfPHP/security-advisories/blob/master/doctrine/orm/2021-04-06.yaml web
https://github.com/doctrine/orm package