Packagist/doctrine/orm: critical
Doctrine SQL injection vulnerability
Action: Upgrade doctrine/orm to 1.2.4 or later.
composer require doctrine/orm:2.0.3composer require doctrine/orm:1.2.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.0.3 | - |
| 1.0.0 | 1.2.4 | - |
Fixed versions
| 2.0.3 | 1.2.4 |
Sources
- osv: GHSA-6q9v-4hq6-5m67
- https://github.com/FriendsOfPHP/security-advisories/blob/master/doctrine/orm/2011-09-25.yaml
- https://github.com/doctrine/orm
- https://web.archive.org/web/20120315064147/https://www.doctrine-project.org/blog/doctrine-security-fix.html
published · modified · JSON