Packagist/propel/propel: critical 9.8

Propel2 SQL injection possible with limit() on MySQL

Action: Upgrade propel/propel to 2.0.0-alpha8 or later.

composer require propel/propel:2.0.0-alpha8

Affected

Fixed versions

Sources

• osv: GHSA-7vw7-qx38-37vr
• https://github.com/propelorm/Propel2/issues/1463
• https://github.com/propelorm/Propel2/pull/1464
• https://github.com/propelorm/Propel2/commit/cd23d7384a15cfe203e23b3a835c8ab1d81d9246
• https://github.com/FriendsOfPHP/security-advisories/blob/master/propel/propel/2018-02-14.yaml
• https://github.com/propelorm/Propel2

published 2024-05-20T17:34:33Z · modified 2024-12-05T05:32:18.600809Z · JSON