Packagist/ibexa/post-install: medium
ibexa/post-install affected by Breach with Varnish VCL
Action: Upgrade ibexa/post-install to 1.0.16 or later.
composer require ibexa/post-install:1.0.16composer require ibexa/post-install:4.6.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.0.16 | - |
| 4.6.0 | 4.6.14 | - |
Fixed versions
| 1.0.16 | 4.6.14 |
Sources
- osv: GHSA-4h8f-c635-25p7
- https://github.com/ezsystems/ezplatform-http-cache/security/advisories/GHSA-mgfg-7533-7jf6
- https://github.com/ibexa/http-cache/security/advisories/GHSA-fh7v-q458-7vmw
- https://github.com/ibexa/post-install/security/advisories/GHSA-4h8f-c635-25p7
- https://github.com/ibexa/post-install/commit/d91cc02623dd3263a99a94ace133c95e48909e5d
- https://developers.ibexa.co/security-advisories/ibexa-sa-2024-006-vulnerabilities-in-content-name-pattern-commerce-shop-and-varnish-vhost-templates
- https://doc.ibexa.co/en/latest/update_and_migration/from_3.3/update_from_3.3/#v3341
- https://doc.ibexa.co/en/latest/update_and_migration/from_4.6/update_from_4.6/#v4614
- https://github.com/ibexa/post-install
- https://www.breachattack.com
published · modified · JSON