Packagist/propel/propel1: critical 9.8
propel/propel1 SQL injection possible with limit() on MySQL
Action: Upgrade propel/propel1 to 1.7.2 or later.
composer require propel/propel1:1.7.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1 | 1.7.2 | - |
Fixed versions
| 1.7.2 |
Sources
- osv: GHSA-7g7c-qhf3-x59p
- https://github.com/propelorm/Propel/issues/1052
- https://github.com/propelorm/Propel/pull/1054
- https://github.com/propelorm/Propel/commit/b72093201f8e225410f62a246653ac039e31c90a
- https://github.com/FriendsOfPHP/security-advisories/blob/master/propel/propel1/2018-02-14.yaml
- https://github.com/propelorm/Propel
published · modified · JSON