Packagist/pi/pi CVE-2017-7251: medium 6.1, EPSS 0.98%
Pi Cross-site Scripting vulnerability
Action: Upgrade pi/pi to 2.6.0-alpha1 or later.
composer require pi/pi:2.6.0-alpha1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.6.0-alpha1 | - |
Fixed versions
| 2.6.0-alpha1 |
Sources
- osv: GHSA-9v3w-m552-m6ff
- https://nvd.nist.gov/vuln/detail/CVE-2017-7251
- https://github.com/pi-engine/pi/issues/1523
- https://github.com/pi-engine/pi/commit/557cd05b21b4d7fe422f90adcfa0c6e3bea06153
- https://github.com/pi-engine/pi
- https://web.archive.org/web/20210124010656/https://www.securityfocus.com/bid/97061
CVE-2017-7251 · published · modified · JSON