Packagist/typo3/neos: high
Cross-Site Scripting (XSS) vulnerabilities in Neos
Action: Upgrade typo3/neos to 1.2.13 or later.
composer require typo3/neos:1.2.13composer require typo3/neos:2.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.0 | 1.2.13 | - |
| 2.0.0 | 2.0.4 | - |
Fixed versions
| 1.2.13 | 2.0.4 |
Sources
- osv: GHSA-4542-p56h-8xww
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/neos/2015-11-23.yaml
- https://github.com/mneuhaus/TYPO3.Neos
- https://www.neos.io/blog/neos-sa-2015-002.html
published · modified · JSON