tocsin

Packagist/drupal/core CVE-2022-24775: unknown, EPSS 2.48%

Drupal uses the third-party Guzzle library for handling HTTP requests and responses to external services. [Guzzle has released a security update](https://github.com/guzzle/psr7/security/advisories/GHS

Action: Upgrade drupal/core to 9.2.16 or later.

composer require drupal/core:9.2.16
composer require drupal/core:9.3.9

Affected

introducedfixedlast affected
8.0.09.2.16-
9.3.09.3.9-

Fixed versions

9.2.169.3.9

Sources

CVE-2022-24775 · published · modified · JSON