{
    "name": "laupifrpar/pusher-bundle",
    "description": "A Pusher bundle for Symfony2",
    "type": "symfony-bundle",
    "keywords": ["pusher", "nosql", "symfony"],
    "homepage": "https://github.com/laupifrpar/lopipusherbundle",
    "license": "MIT",
    "authors": [{
        "name": "Pierre-Louis Launay",
        "email": "laupi.frpar@gmail.com",
        "homepage": "https://github.com/laupiFrpar",
        "role": "developer"
    },{
        "name": "Community contributors",
        "homepage": "https://github.com/laupifrpar/lopipusherbundle/contributors"
    }],
    "support": {
        "issues": "https://github.com/laupiFrpar/LopiPusherBundle/issues",
        "source": "https://github.com/laupiFrpar/LopiPusherBundle"
    },
    "require": {
        "php": ">=5.3.3",
        "pusher/pusher-php-server": "~2.1"
    },
    "require-dev": {
        "symfony/config": "~2.3",
        "symfony/dependency-injection": "~2.3",
        "symfony/http-kernel": "~2.3"
    },
    "autoload": {
        "psr-0": { "Lopi\\Bundle\\PusherBundle": "" }
    },
    "target-dir": "Lopi/Bundle/PusherBundle",
    "minimum-stability": "stable"
}

{
    "name": "laupifrpar/pusher-bundle",
    "description": "A Pusher bundle for Symfony2",
    "type": "symfony-bundle",
    "keywords": ["pusher", "nosql", "symfony"],
    "homepage": "https://github.com/laupifrpar/lopipusherbundle",
    "license": "MIT",
    "authors": [{
        "name": "Pierre-Louis Launay",
        "email": "laupi.frpar@gmail.com",
        "homepage": "https://github.com/laupiFrpar",
        "role": "developer"
    },{
        "name": "Community contributors",
        "homepage": "https://github.com/laupifrpar/lopipusherbundle/contributors"
    }],
    "support": {
        "issues": "https://github.com/laupiFrpar/LopiPusherBundle/issues",
        "source": "https://github.com/laupiFrpar/LopiPusherBundle"
    },
    "require": {
        "php": ">=5.3.3",
        "pusher/pusher-php-server": ">=2.2.1"
    },
    "require-dev": {
        "symfony/config": "~2.3",
        "symfony/dependency-injection": "~2.3",
        "symfony/http-kernel": "~2.3"
    },
    "autoload": {
        "psr-0": { "Lopi\\Bundle\\PusherBundle": "" }
    },
    "target-dir": "Lopi/Bundle/PusherBundle",
    "minimum-stability": "stable"
}

Upgrade pusher library to >=2.2.1 which fixes a private channel security exploit.
Upgrade pusher library to >=2.2.1 which fixes a private channel security exploit.

2.2.1 has stronger validation of the input which prevents a trusted user sending malformed parameters to an auth endpoint, and tricking it into signing a string which might be used to subscribe to a different private channel in the same app.
