Packagist/silverstripe/framework: high 8.8

silverstripe/framework has potential SQL Injection vulnerability in PostgreSQL database connector

Action: Upgrade silverstripe/framework to 4.0.6 or later.

composer require silverstripe/framework:4.0.6

composer require silverstripe/framework:4.1.4

composer require silverstripe/framework:4.2.3

Affected

Fixed versions

Sources

• osv: GHSA-265q-222x-52m6
• https://github.com/silverstripe/silverstripe-framework/commit/48bd335648188df9dae72be1e5f9c808f3fe1e77
• https://github.com/silverstripe/silverstripe-framework/commit/fecedc2d98eeaaff6424fb59dc70ef6bdc6dc92d
• https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2018-020-1.yaml
• https://github.com/silverstripe/silverstripe-framework
• https://www.silverstripe.org/download/security-releases/ss-2018-020

published 2024-05-28T13:01:48Z · modified 2024-12-03T06:23:59.669492Z · JSON