Packagist/sensiolabs/connect: medium 6.1
sensiolabs/connect has a Cross-Site Request Forgery Vulnerability
Action: Upgrade sensiolabs/connect to 4.2.3 or later.
composer require sensiolabs/connect:4.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.2.3 | - |
Fixed versions
| 4.2.3 |
Sources
- osv: GHSA-6wqp-7g94-f69j
- https://github.com/sensiolabs/connect/pull/63
- https://github.com/symfonycorp/connect/commit/9522aa774e8a0f8a61e709d828e6cc34c4c1e703
- https://github.com/FriendsOfPHP/security-advisories/blob/master/sensiolabs/connect/2018-06-08-1.yaml
- https://github.com/symfonycorp/connect
published · modified · JSON