Packagist/fuel/core: high
fuel/core ImageMagick driver does not escape all shell arguments.
Action: Upgrade fuel/core to 1.8.0.4 or later.
composer require fuel/core:1.8.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.0.4 | - |
Fixed versions
| 1.8.0.4 |
Sources
- osv: GHSA-26hp-cgjj-m2j3
- https://github.com/fuel/core/commit/95c134e9e087f3c4523fe6cd86ed4e9e1e7af91c
- https://fuelphp.com/security-advisories
- https://github.com/FriendsOfPHP/security-advisories/blob/master/fuel/core/2016-06-29-1.yaml
- https://github.com/fuel/core
published · modified · JSON