Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Api-platform
Api-platform/hal
Api-platform Api-platform/hal vulnerabilities
api-platform
core
,
api-platform/hal
,
api-platform/json-api
+2 more
API Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate
CVE-2026-49858
Fix available
5.9
Medium
July 1, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open