{"id":12105530,"name":"api-platform/hal","ecosystem":"packagist","description":"API Hal support","homepage":"https://api-platform.com","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/api-platform/hal","keywords_array":["rest","api","hal"],"namespace":"api-platform","versions_count":76,"first_release_published_at":"2025-09-16T12:49:22.000Z","latest_release_published_at":"2026-10-09T14:10:51.000Z","latest_release_number":"v5.0.5","latest_published_release_number":"v5.0.5","last_synced_at":"2026-10-28T09:21:44.084Z","created_at":"2025-09-15T13:31:46.678Z","updated_at":"2026-10-28T09:21:44.581Z","registry_url":"https://packagist.org/packages/api-platform/hal#","install_command":"composer require api-platform/hal","documentation_url":null,"metadata":{"funding":[]},"repo_metadata":{"id":315292578,"uuid":"1057184159","full_name":"api-platform/hal","owner":"api-platform","description":"API Platform HAL component","archived":false,"fork":false,"pushed_at":"2026-10-16T16:36:23.000Z","size":170,"stargazers_count":3,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-10-17T08:00:21.022Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/api-platform.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"api-platform","open_collective":"api-platform","tidelift":"packagist/api-platform/core"}},"created_at":"2025-09-15T11:40:43.000Z","updated_at":"2026-10-16T16:36:28.000Z","dependencies_parsed_at":"2025-09-17T20:49:28.035Z","dependency_job_id":"0bb307cf-a9f2-48f9-bdf6-963c12a0aad1","html_url":"https://github.com/api-platform/hal","commit_stats":null,"previous_names":["api-platform/hal"],"tags_count":54,"template":false,"template_full_name":null,"purl":"pkg:github/api-platform/hal","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/api-platform","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":344872684,"owners_count":38333072,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-17T02:00:06.547Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"api-platform","name":"API Platform","uuid":"13420081","kind":"organization","description":"The API-first framework","email":"contact@les-tilleuls.coop","website":"https://api-platform.com","location":"The World Wide Web","twitter":"ApiPlatform","company":null,"icon_url":"https://avatars.githubusercontent.com/u/13420081?v=4","repositories_count":50,"last_synced_at":"2026-10-24T19:22:57.417Z","metadata":{"has_sponsors_listing":true,"funding":{"github":"api-platform","open_collective":"api-platform","tidelift":"packagist/api-platform/core"}},"html_url":"https://github.com/api-platform","funding_links":["https://github.com/sponsors/api-platform","https://opencollective.com/api-platform","https://tidelift.com/funding/github/packagist/api-platform/core"],"total_stars":15051,"followers":418,"following":0,"created_at":"2022-11-02T16:50:53.388Z","updated_at":"2026-10-24T19:22:57.431Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/api-platform","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/api-platform/repositories"},"tags":[{"name":"v5.0.0-alpha.2","sha":"bbc8892e043eda60d43e01fc256ae23fc8bdb659","kind":"commit","published_at":"2026-07-12T08:10:11.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v5.0.0-alpha.2","html_url":"https://github.com/api-platform/hal/releases/tag/v5.0.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v5.0.0-alpha.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v5.0.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v5.0.0-alpha.2/manifests"},{"name":"v4.4.0-alpha.3","sha":"a895aeface28ca3d77aca0e88d3e862c2ffa1577","kind":"commit","published_at":"2026-07-12T07:36:01.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.4.0-alpha.3","html_url":"https://github.com/api-platform/hal/releases/tag/v4.4.0-alpha.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.4.0-alpha.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.4.0-alpha.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.4.0-alpha.3/manifests"},{"name":"v4.3.17","sha":"3499d6b0b1b2a8c59e789ed7215b705c71b61d3e","kind":"commit","published_at":"2026-07-03T05:49:32.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.17","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.17","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.17","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.17","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.17/manifests"},{"name":"v4.3.16","sha":"3499d6b0b1b2a8c59e789ed7215b705c71b61d3e","kind":"commit","published_at":"2026-07-03T05:49:32.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.16","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.16","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.16","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.16","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.16/manifests"},{"name":"v5.0.0-alpha.1","sha":"837c2db18c12e9ae140024066056e31142126276","kind":"commit","published_at":"2026-06-29T11:22:12.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v5.0.0-alpha.1","html_url":"https://github.com/api-platform/hal/releases/tag/v5.0.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v5.0.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v5.0.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v5.0.0-alpha.1/manifests"},{"name":"v4.4.0-alpha.2","sha":"847b9ddcbfbc439cd315dc4663bbd28d687d4257","kind":"commit","published_at":"2026-06-25T16:22:16.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.4.0-alpha.2","html_url":"https://github.com/api-platform/hal/releases/tag/v4.4.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.4.0-alpha.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.4.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.4.0-alpha.2/manifests"},{"name":"v4.3.13","sha":"acef54a84506b79c93e8843991f29900553b1645","kind":"commit","published_at":"2026-06-13T05:11:46.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.13","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.13/manifests"},{"name":"v4.3.12","sha":"acef54a84506b79c93e8843991f29900553b1645","kind":"commit","published_at":"2026-06-13T05:11:46.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.12","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.12/manifests"},{"name":"v4.4.0-alpha.1","sha":"acef54a84506b79c93e8843991f29900553b1645","kind":"commit","published_at":"2026-06-13T05:11:46.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.4.0-alpha.1","html_url":"https://github.com/api-platform/hal/releases/tag/v4.4.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.4.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.4.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.4.0-alpha.1/manifests"},{"name":"v4.3.15","sha":"acef54a84506b79c93e8843991f29900553b1645","kind":"commit","published_at":"2026-06-13T05:11:46.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.15","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.15","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.15","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.15","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.15/manifests"},{"name":"v4.3.14","sha":"acef54a84506b79c93e8843991f29900553b1645","kind":"commit","published_at":"2026-06-13T05:11:46.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.14","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.14","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.14","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.14","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.14/manifests"},{"name":"v4.2.26","sha":"6807be3bac33eb20426f7c0a82ba9490b79845da","kind":"commit","published_at":"2026-06-13T05:06:28.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.26","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.26","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.26","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.26","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.26/manifests"},{"name":"v4.3.11","sha":"8d0aaa1aa789b5d82748262e438275e3dd814ec9","kind":"commit","published_at":"2026-06-04T14:33:29.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.11","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.11/manifests"},{"name":"v4.3.10","sha":"8d0aaa1aa789b5d82748262e438275e3dd814ec9","kind":"commit","published_at":"2026-06-04T14:33:29.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.10","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.10/manifests"},{"name":"v4.3.9","sha":"8d0aaa1aa789b5d82748262e438275e3dd814ec9","kind":"commit","published_at":"2026-06-04T14:33:29.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.9","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.9/manifests"},{"name":"v4.3.8","sha":"cb8ae9434a6655572fb8f7f01be1deaa22ba26ec","kind":"commit","published_at":"2026-06-04T12:03:56.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.8","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.8/manifests"},{"name":"v4.2.25","sha":"4a906e4376706969724d130f8f0957b14510d19d","kind":"commit","published_at":"2026-06-04T09:21:49.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.25","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.25","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.25","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.25","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.25/manifests"},{"name":"v4.3.5","sha":"2e3eb7aaaf42edfc6ff32a83d7d3e1f72abebbac","kind":"commit","published_at":"2026-05-11T09:38:13.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.5","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.5/manifests"},{"name":"v4.3.7","sha":"2e3eb7aaaf42edfc6ff32a83d7d3e1f72abebbac","kind":"commit","published_at":"2026-05-11T09:38:13.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.7","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.7/manifests"},{"name":"v4.3.6","sha":"2e3eb7aaaf42edfc6ff32a83d7d3e1f72abebbac","kind":"commit","published_at":"2026-05-11T09:38:13.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.6","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.6/manifests"},{"name":"v4.3.4","sha":"e6d9f543e9c3a95fe8174c21eb3e9ac1b678c7ee","kind":"commit","published_at":"2026-04-30T12:21:24.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.4","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.4/manifests"},{"name":"v4.3.3","sha":"34a928ae58b50705cd3cc5a524d93fda39950f8d","kind":"commit","published_at":"2026-03-06T15:07:49.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.3","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.3/manifests"},{"name":"v4.3.2","sha":"34a928ae58b50705cd3cc5a524d93fda39950f8d","kind":"commit","published_at":"2026-03-06T15:07:49.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.2","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.2/manifests"},{"name":"v4.3.1","sha":"34a928ae58b50705cd3cc5a524d93fda39950f8d","kind":"commit","published_at":"2026-03-06T15:07:49.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.1","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.1/manifests"},{"name":"v4.3.0","sha":"34a928ae58b50705cd3cc5a524d93fda39950f8d","kind":"commit","published_at":"2026-03-06T15:07:49.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.0","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.0/manifests"},{"name":"v4.3.0-beta.2","sha":"ea4bd7d81c5964a1c42101d6a7eee22f534b5339","kind":"commit","published_at":"2026-03-06T09:30:10.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.0-beta.2","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.0-beta.2/manifests"},{"name":"v4.3.0-beta.1","sha":"957ede4d6f4b4f0c29c9b193851590f9b3969e26","kind":"commit","published_at":"2026-02-27T10:34:04.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.0-beta.1","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.0-beta.1/manifests"},{"name":"v4.2.20","sha":"9d8b5a596808eda4aa777e73d96354c8d2c56c98","kind":"commit","published_at":"2026-02-25T15:52:40.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.20","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.20","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.20","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.20","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.20/manifests"},{"name":"v4.2.19","sha":"9d8b5a596808eda4aa777e73d96354c8d2c56c98","kind":"commit","published_at":"2026-02-25T15:52:40.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.19","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.19","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.19","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.19","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.19/manifests"},{"name":"v4.2.18","sha":"9d8b5a596808eda4aa777e73d96354c8d2c56c98","kind":"commit","published_at":"2026-02-25T15:52:40.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.18","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.18","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.18","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.18","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.18/manifests"},{"name":"v4.2.24","sha":"9d8b5a596808eda4aa777e73d96354c8d2c56c98","kind":"commit","published_at":"2026-02-25T15:52:40.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.24","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.24","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.24","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.24","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.24/manifests"},{"name":"v4.2.23","sha":"9d8b5a596808eda4aa777e73d96354c8d2c56c98","kind":"commit","published_at":"2026-02-25T15:52:40.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.23","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.23","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.23","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.23","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.23/manifests"},{"name":"v4.2.22","sha":"9d8b5a596808eda4aa777e73d96354c8d2c56c98","kind":"commit","published_at":"2026-02-25T15:52:40.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.22","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.22","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.22","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.22","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.22/manifests"},{"name":"v4.2.21","sha":"9d8b5a596808eda4aa777e73d96354c8d2c56c98","kind":"commit","published_at":"2026-02-25T15:52:40.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.21","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.21","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.21","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.21","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.21/manifests"},{"name":"4.3.0-alpha.2","sha":"6c52c12ae789db9722f3f0e3075f65c176f9bb75","kind":"commit","published_at":"2026-02-13T17:43:34.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/4.3.0-alpha.2","html_url":"https://github.com/api-platform/hal/releases/tag/4.3.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@4.3.0-alpha.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/4.3.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/4.3.0-alpha.2/manifests"},{"name":"4.3.0-alpha.1","sha":"6c52c12ae789db9722f3f0e3075f65c176f9bb75","kind":"commit","published_at":"2026-02-13T17:43:34.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/4.3.0-alpha.1","html_url":"https://github.com/api-platform/hal/releases/tag/4.3.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@4.3.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/4.3.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/4.3.0-alpha.1/manifests"},{"name":"v4.3.0-alpha.2","sha":"6c52c12ae789db9722f3f0e3075f65c176f9bb75","kind":"commit","published_at":"2026-02-13T17:43:34.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.0-alpha.2","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.0-alpha.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.0-alpha.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.0-alpha.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.0-alpha.2/manifests"},{"name":"v4.3.0-alpha.1","sha":"6c52c12ae789db9722f3f0e3075f65c176f9bb75","kind":"commit","published_at":"2026-02-13T17:43:34.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.3.0-alpha.1","html_url":"https://github.com/api-platform/hal/releases/tag/v4.3.0-alpha.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.3.0-alpha.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.0-alpha.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.3.0-alpha.1/manifests"},{"name":"v4.2.17","sha":"90871de2dde3bf98ef0c1bee6483fdf87ee95b03","kind":"commit","published_at":"2026-02-13T17:30:49.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.17","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.17","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.17","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.17","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.17/manifests"},{"name":"v4.2.16","sha":"90871de2dde3bf98ef0c1bee6483fdf87ee95b03","kind":"commit","published_at":"2026-02-13T17:30:49.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.16","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.16","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.16","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.16","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.16/manifests"},{"name":"v4.2.15","sha":"6ec79bfad4eb82baeb86a152c8f3c6401e01099d","kind":"commit","published_at":"2026-01-26T15:38:30.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.15","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.15","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.15","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.15","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.15/manifests"},{"name":"v4.2.14","sha":"59b48d5e51d4864e6daf39e015dffa6c21abe9e9","kind":"commit","published_at":"2025-12-27T22:15:57.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.14","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.14","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.14","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.14","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.14/manifests"},{"name":"v4.2.13","sha":"59b48d5e51d4864e6daf39e015dffa6c21abe9e9","kind":"commit","published_at":"2025-12-27T22:15:57.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.13","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.13/manifests"},{"name":"v4.2.12","sha":"59b48d5e51d4864e6daf39e015dffa6c21abe9e9","kind":"commit","published_at":"2025-12-27T22:15:57.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.12","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.12/manifests"},{"name":"v4.2.11","sha":"75c3352f2b2e7576aa02c0a18f635aed7f3c116b","kind":"commit","published_at":"2025-11-30T16:14:56.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.11","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.11/manifests"},{"name":"v4.2.10","sha":"75c3352f2b2e7576aa02c0a18f635aed7f3c116b","kind":"commit","published_at":"2025-11-30T16:14:56.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.10","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.10/manifests"},{"name":"v4.2.9","sha":"75c3352f2b2e7576aa02c0a18f635aed7f3c116b","kind":"commit","published_at":"2025-11-30T16:14:56.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.9","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.9/manifests"},{"name":"v4.2.8","sha":"75c3352f2b2e7576aa02c0a18f635aed7f3c116b","kind":"commit","published_at":"2025-11-30T16:14:56.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.8","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.8/manifests"},{"name":"v4.2.7","sha":"8c811ee46e601ae60bc83567c6aab16f96b9d34f","kind":"commit","published_at":"2025-11-30T12:55:42.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.7","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.7/manifests"},{"name":"v4.2.6","sha":"9ea7030a8dbd5138ca1a7587efe17c4c2381860e","kind":"commit","published_at":"2025-11-13T15:51:59.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.6","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.6/manifests"},{"name":"v4.2.5","sha":"9ea7030a8dbd5138ca1a7587efe17c4c2381860e","kind":"commit","published_at":"2025-11-13T15:51:59.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.5","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.5/manifests"},{"name":"v4.2.4","sha":"9ea7030a8dbd5138ca1a7587efe17c4c2381860e","kind":"commit","published_at":"2025-11-13T15:51:59.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.4","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.4/manifests"},{"name":"4.2.0-beta.1","sha":"c75d92dc08451be2f711d0737e4124eb8c602a78","kind":"commit","published_at":"2025-09-16T12:49:22.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/4.2.0-beta.1","html_url":"https://github.com/api-platform/hal/releases/tag/4.2.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@4.2.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/4.2.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/4.2.0-beta.1/manifests"},{"name":"v4.2.3","sha":"c75d92dc08451be2f711d0737e4124eb8c602a78","kind":"commit","published_at":"2025-09-16T12:49:22.000Z","download_url":"https://codeload.github.com/api-platform/hal/tar.gz/v4.2.3","html_url":"https://github.com/api-platform/hal/releases/tag/v4.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/api-platform/hal@v4.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/tags/v4.2.3/manifests"}]},"repo_metadata_updated_at":"2026-10-28T09:21:44.581Z","dependent_packages_count":0,"downloads":481119,"downloads_period":"total","dependent_repos_count":0,"rankings":{"downloads":58.579806984822305,"dependent_repos_count":28.562200133048414,"dependent_packages_count":16.6667736187671,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":34.6029269122126},"purl":"pkg:composer/api-platform/hal","advisories":[{"uuid":"GSA_kwCzR0hTQS1wamh4LTNjM3ctOXYyM84ABafe","url":"https://github.com/advisories/GHSA-pjhx-3c3w-9v23","title":"API Platform Core vulnerable to cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate","description":"### Impact\n\n`#[ApiProperty(security: ...)]` is evaluated per request to decide whether a property is exposed. The `componentsCache` arrays in `ApiPlatform\\JsonApi\\Serializer\\ItemNormalizer` and `ApiPlatform\\Hal\\Serializer\\ItemNormalizer` are keyed on `$context['cache_key']`, which is set unconditionally before delegating to the parent normalizer. The component structure (attributes, relationships, links) computed for one request can therefore be reused for a subsequent request whose user has a different set of accessible properties. A user with lower privileges may end up seeing the structure of properties that the security predicate would otherwise have hidden for them.\n\nThis is the same vulnerability class as [GHSA-428q-q3vv-3fq3](https://github.com/api-platform/core/security/advisories/GHSA-428q-q3vv-3fq3) / CVE-2025-31485, which fixed only the GraphQL `ItemNormalizer`. The JSON:API and HAL paths were not addressed at the time.\n\n### Exploitation conditions\n\nExploitation requires all of the following to coincide:\n\n- The application exposes a resource via the JSON:API and/or HAL formats.\n- At least one property of that resource uses `#[ApiProperty(security: ...)]` with a predicate whose result depends on the current user (or on per-request state).\n- A request from a user for whom the predicate evaluates to `true` populates `componentsCache` before a request from a user for whom the predicate evaluates to `false`, within the lifetime of the same PHP process.\n- The deployment uses a long-running PHP runtime that keeps the normalizer instance alive across requests (FrankenPHP worker mode, RoadRunner, Swoole, ReactPHP, etc.). With classic `php-fpm` workers the cache only survives the duration of a single request, which makes the issue much harder to observe in practice.\n\n### Patches\n\n- 4.1.29\n- 4.2.25\n- 4.3.8\n\nAll three branches receive patched releases of `api-platform/core`, `api-platform/json-api`, and `api-platform/hal`.\n\n### Workarounds\n\nOverride the JSON:API and HAL `ItemNormalizer` services to gate `$context['cache_key']` with a resource-class security check, or avoid `#[ApiProperty(security: ...)]` on resources served as JSON:API or HAL until the patch is applied. Pinning the deployment to classic `php-fpm` workers also limits exposure since the cache does not survive across requests.\n\n### Credits\n\n- Tillmann Baumgart (@tillmon) — originally identified the broader cache-key gap and proposed moving `isCacheKeySafe` to `AbstractItemNormalizer`.\n- Antoine Bluchet (@soyuka) — extended the gate to JSON:API and HAL normalizers.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-07-10T14:32:01.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.9,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://github.com/api-platform/core/security/advisories/GHSA-pjhx-3c3w-9v23","https://nvd.nist.gov/vuln/detail/CVE-2026-49858","https://github.com/advisories/GHSA-pjhx-3c3w-9v23"],"source_kind":"github","identifiers":["GHSA-pjhx-3c3w-9v23","CVE-2026-49858"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-07-10T15:00:09.462Z","updated_at":"2026-10-26T21:02:18.081Z","epss_percentage":0.00315,"epss_percentile":0.24162,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wamh4LTNjM3ctOXYyM84ABafe","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1wamh4LTNjM3ctOXYyM84ABafe","packages":[{"ecosystem":"packagist","package_name":"api-platform/hal","versions":[{"first_patched_version":"4.3.8","vulnerable_version_range":"\u003e= 4.3.0, \u003c 4.3.8"},{"first_patched_version":"4.2.25","vulnerable_version_range":"\u003e= 4.2.0, \u003c 4.2.25"},{"first_patched_version":"4.1.29","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.1.29"}],"purl":null},{"ecosystem":"packagist","package_name":"api-platform/json-api","versions":[{"first_patched_version":"4.3.8","vulnerable_version_range":"\u003e= 4.3.0, \u003c 4.3.8"},{"first_patched_version":"4.2.25","vulnerable_version_range":"\u003e= 4.2.0, \u003c 4.2.25"},{"first_patched_version":"4.1.29","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.1.29"}],"purl":null},{"ecosystem":"packagist","package_name":"api-platform/core","versions":[{"first_patched_version":"4.3.8","vulnerable_version_range":"\u003e= 4.3.0, \u003c 4.3.8"},{"first_patched_version":"4.2.25","vulnerable_version_range":"\u003e= 4.2.0, \u003c 4.2.25"},{"first_patched_version":"4.1.29","vulnerable_version_range":"\u003e= 2.6.0, \u003c 4.1.29"}],"purl":null}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wamh4LTNjM3ctOXYyM84ABafe/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/packagist/api-platform/hal","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/packagist/api-platform/hal","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/packagist/api-platform/hal/dependencies","status":null,"funding_links":["https://github.com/sponsors/api-platform","https://opencollective.com/api-platform","https://tidelift.com/funding/github/packagist/api-platform/core"],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-27T09:09:09.092Z","issues_count":0,"pull_requests_count":0,"avg_time_to_close_issue":null,"avg_time_to_close_pull_request":null,"issues_closed_count":0,"pull_requests_closed_count":0,"pull_request_authors_count":0,"issue_authors_count":0,"avg_comments_per_issue":null,"avg_comments_per_pull_request":null,"merged_pull_requests_count":0,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/api-platform%2Fhal/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/packages/api-platform%2Fhal/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/packages/api-platform%2Fhal/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/packages/api-platform%2Fhal/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/packages/api-platform%2Fhal/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/packages/api-platform%2Fhal/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/packages/api-platform%2Fhal/codemeta","maintainers":[{"uuid":"dunglas","login":"dunglas","name":null,"email":null,"url":null,"packages_count":63,"html_url":"https://packagist.org/users/dunglas","role":null,"created_at":"2025-09-17T20:09:37.821Z","updated_at":"2025-09-17T20:09:37.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/maintainers/dunglas/packages"},{"uuid":"soyuka","login":"soyuka","name":null,"email":null,"url":null,"packages_count":39,"html_url":"https://packagist.org/users/soyuka","role":null,"created_at":"2026-02-16T13:32:43.957Z","updated_at":"2026-02-16T13:32:43.957Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/maintainers/soyuka/packages"}]}