Packagist/cartalyst/sentry: high 8.9

OpenCFP Framework (Sentry) Account takeover via null password reset codes

Action: Upgrade cartalyst/sentry to 2.1.7 or later.

composer require cartalyst/sentry:2.1.7

Affected

Fixed versions

Sources

• osv: GHSA-2m5g-8xpw-42vp
• https://github.com/cartalyst/sentry/commit/c679730b8848686f59125cd821bf94946fb16a94
• https://github.com/FriendsOfPHP/security-advisories/blob/master/cartalyst/sentry/2016-09-05.yaml
• https://github.com/cartalyst/sentry
• https://github.com/cartalyst/sentry/releases/tag/v2.1.7
• https://haxx.ml/post/149975211631/how-i-hacked-your-cfp-and-probably-some-other
• https://web.archive.org/web/20180119075946/https://haxx.ml/post/149975211631/how-i-hacked-your-cfp-and-probably-some-other

published 2024-05-15T18:07:44Z · modified 2026-07-15T22:00:51.183598367Z · JSON