Packagist/liftkit/database CVE-2016-15020: critical 9.8, EPSS 0.70%

SQL Injection in liftkit/database

Action: Upgrade liftkit/database to 2.13.2 or later.

composer require liftkit/database:2.13.2

Affected

Fixed versions

Sources

• osv: GHSA-8hcf-2m4v-f2rq
• https://nvd.nist.gov/vuln/detail/CVE-2016-15020
• https://github.com/liftkit/database/commit/42ec8f2b22e0b0b98fb5b4444ed451c1b21d125a
• https://github.com/liftkit/database
• https://github.com/liftkit/database/releases/tag/v2.13.2
• https://vuldb.com/?ctiid.218391
• https://vuldb.com/?id.218391

CVE-2016-15020 · published 2023-01-16T12:30:18Z · modified 2023-11-08T03:58:22.566602Z · JSON