Packagist/mikehaertl/php-shellcommand CVE-2019-10774: critical 9.8, EPSS 4.63%
php-shellcommand command injection vulnerability
Action: Upgrade mikehaertl/php-shellcommand to 1.6.1 or later.
composer require mikehaertl/php-shellcommand:1.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.1 | - |
Fixed versions
| 1.6.1 |
Sources
- osv: GHSA-c7fv-wv9f-cgjw
- https://nvd.nist.gov/vuln/detail/CVE-2019-10774
- https://github.com/mikehaertl/php-shellcommand/commit/8d98d8536e05abafe76a491da87296d824939076
- https://github.com/mikehaertl/php-shellcommand
- https://snyk.io/vuln/SNYK-PHP-MIKEHAERTLPHPSHELLCOMMAND-538426
CVE-2019-10774 · published · modified · JSON