CVE-2021-21424.yaml

title:     "CVE-2021-21424: Prevent user enumeration via response content in authentication mechanisms"
link:      https://symfony.com/cve-2021-21424
cve:       CVE-2021-21424
branches:
    2.0.x:
        time:     2021-05-12 08:00:00
        versions: ['>=2.0.0', '<2.1.0']
    2.1.x:
        time:     2021-05-12 08:00:00
        versions: ['>=2.1.0', '<2.2.0']
    2.2.x:
        time:     2021-05-12 08:00:00
        versions: ['>=2.2.0', '<2.3.0']
    2.3.x:
        time:     2021-05-12 08:00:00
        versions: ['>=2.3.0', '<2.4.0']
    2.4.x:
        time:     2021-05-12 08:00:00
        versions: ['>=2.4.0', '<2.5.0']
    2.5.x:
        time:     2021-05-12 08:00:00
        versions: ['>=2.5.0', '<2.6.0']
    2.6.x:
        time:     2021-05-12 08:00:00
        versions: ['>=2.6.0', '<2.7.0']
    2.7.x:
        time:     2021-05-12 08:00:00
        versions: ['>=2.7.0', '<2.8.0']
    2.8.x:
        time:     2021-05-12 08:00:00
        versions: ['>=2.8.0', '<2.9.0']
    2.9.x:
        time:     2021-05-12 08:00:00
        versions: ['>=2.9.0', '<2.10.0']
    2.10.x:
        time:     2021-05-12 08:00:00
        versions: ['>=2.10.0', '<2.10.7']
    2.11.x:
        time:     2021-05-12 08:00:00
        versions: ['>=2.11.0', '<2.11.3']
reference: composer://lexik/jwt-authentication-bundle