Unique Packagist advisory ID.
Affected package name.
OptionalremoteDeprecated remote source ID. Prefer sources.
Advisory title.
OptionallinkAdvisory or disclosure URL.
OptionalcveCVE identifier when available.
Composer constraint describing affected versions.
OptionalsourceDeprecated source name. Prefer sources.
OptionalsourcesAdvisory sources.
OptionalreportedReport date.
OptionalcomposerComposer repository containing the package.
OptionalseverityCVSS severity when available.
Security advisory entry returned by Packagist.