api-platform/hal vulnerabilities (Packagist)

1 vulnerability.

• api-platform/hal Packagist API Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate CVE-2026-49858 Fix available 5.9 MediumJuly 1, 2026