api-platform/json-api vulnerabilities (Packagist)

1 vulnerability.

• api-platform/json-api Packagist API Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate CVE-2026-49858 Fix available 5.9 MediumJuly 1, 2026