Packagist/algolia/algoliasearch-magento-2: medium
Algolia Search & Discovery for Magento 2 Has Untrusted Data Handling
Action: Upgrade algolia/algoliasearch-magento-2 to 3.16.2 or later.
composer require algolia/algoliasearch-magento-2:3.17.2composer require algolia/algoliasearch-magento-2:3.16.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.17.0-beta.1 | 3.17.2 | - |
| 0 | 3.16.2 | - |
Fixed versions
| 3.17.2 | 3.16.2 |
Sources
- osv: GHSA-595p-g7xc-c333
- https://github.com/algolia/algoliasearch-magento-2/security/advisories/GHSA-595p-g7xc-c333
- https://github.com/algolia/algoliasearch-magento-2
- https://github.com/algolia/algoliasearch-magento-2/releases/tag/3.16.2
- https://github.com/algolia/algoliasearch-magento-2/releases/tag/3.17.2
published · modified · JSON