Packagist/silverstripe/silverstripe-omnipay CVE-2022-29254: low 3.7, EPSS 0.67%

Failed payment recorded has completed in Silverstripe Omnipay

Action: Upgrade silverstripe/silverstripe-omnipay to 2.5.2 or later.

composer require silverstripe/silverstripe-omnipay:2.5.2

composer require silverstripe/silverstripe-omnipay:3.0.2

composer require silverstripe/silverstripe-omnipay:3.1.4

composer require silverstripe/silverstripe-omnipay:3.2.1

Affected

Fixed versions

Sources

• osv: GHSA-48f2-m7jg-866x
• https://github.com/silverstripe/silverstripe-omnipay/security/advisories/GHSA-48f2-m7jg-866x
• https://nvd.nist.gov/vuln/detail/CVE-2022-29254
• https://github.com/silverstripe/silverstripe-omnipay/commit/7dee9a1e0a5f54c2dc06e018cff3d9a19044e01b
• https://github.com/silverstripe/silverstripe-omnipay
• https://github.com/silverstripe/silverstripe-omnipay/releases/tag/2.5.2
• https://github.com/silverstripe/silverstripe-omnipay/releases/tag/3.0.2
• https://github.com/silverstripe/silverstripe-omnipay/releases/tag/3.1.4
• https://github.com/silverstripe/silverstripe-omnipay/releases/tag/3.2.1

CVE-2022-29254 · published 2022-06-06T21:24:39Z · modified 2023-11-08T04:09:12.475806Z · JSON