tocsin

Packagist/drupal/core CVE-2019-11831: unknown, EPSS 5.44%

This security release fixes third-party dependencies included in or required by Drupal core. As described in [TYPO3-PSA-2019-007: By-passing protection of Phar Stream Wrapper Interceptor](https://typo

Action: Upgrade drupal/core to 8.6.16 or later.

composer require drupal/core:8.6.16
composer require drupal/core:8.7.1

Affected

introducedfixedlast affected
8.0.08.6.16-
8.7.08.7.1-

Fixed versions

8.6.168.7.1

Sources

CVE-2019-11831 · published · modified · JSON