Packagist/ezsystems/ezplatform-richtext: high
ezsystems/ezplatform-richtext allows access to external entities in XML
Action: Upgrade ezsystems/ezplatform-richtext to 2.3.26 or later.
composer require ezsystems/ezplatform-richtext:2.3.26Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3.0-beta1 | 2.3.26 | - |
Fixed versions
| 2.3.26 |
Sources
- osv: GHSA-2jqj-5qv2-xvcg
- https://github.com/ezsystems/ezplatform-richtext/security/advisories/GHSA-2jqj-5qv2-xvcg
- https://github.com/ezsystems/ezplatform-richtext/commit/5ba2a82cc3aa6235ecfe87278e20c1451d9df913
- https://developers.ibexa.co/security-advisories/ibexa-sa-2025-002-xxe-vulnerability-in-richtext
- https://github.com/ezsystems/ezplatform-richtext
published · modified · JSON