Packagist/pusher/pusher-php-server: medium 6.5
Pusher Service Channel Authentication Bypass
Action: Upgrade pusher/pusher-php-server to 2.2.1 or later.
composer require pusher/pusher-php-server:2.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.1 | - |
Fixed versions
| 2.2.1 |
Sources
- osv: GHSA-7v7m-pcw5-h3cg
- https://github.com/pusher/pusher-http-php/commit/5a2ccdd3b14932b9cb5d0f59cf81d19c447214f1
- https://blog.pusher.com/update-on-security
- https://github.com/FriendsOfPHP/security-advisories/blob/master/pusher/pusher-php-server/2015-05-13.yaml
- https://github.com/pusher/pusher-http-php
published · modified · JSON