Packagist/neos/neos: high 7.5
Neos Information Disclosure Security Note
Action: Upgrade neos/neos to 3.0.20 or later.
composer require neos/neos:3.0.20composer require neos/neos:3.1.18composer require neos/neos:3.2.14composer require neos/neos:3.3.23composer require neos/neos:4.0.17composer require neos/neos:4.1.16composer require neos/neos:4.2.12composer require neos/neos:4.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3.0 | 3.0.20 | - |
| 3.1.0 | 3.1.18 | - |
| 3.2.0 | 3.2.14 | - |
| 3.3.0 | 3.3.23 | - |
| 4.0.0 | 4.0.17 | - |
| 4.1.0 | 4.1.16 | - |
| 4.2.0 | 4.2.12 | - |
| 4.3.0 | 4.3.3 | - |
Fixed versions
| 3.0.20 | 3.1.18 | 3.2.14 | 3.3.23 | 4.0.17 | 4.1.16 | 4.2.12 | 4.3.3 |
Sources
- osv: GHSA-3c5g-73f7-grvm
- https://github.com/FriendsOfPHP/security-advisories/blob/master/neos/neos/2019-06-17.yaml
- https://github.com/neos/neos
- https://www.neos.io/blog/neos-workspace-disclosure-security.html
published · modified · JSON