Packagist/pheditor/pheditor: critical 10

Pheditor: Authentication Bypass in Forced Password-Change Flow via Unverified Current Password

Action: Upgrade pheditor/pheditor to 2.0.8 or later.

composer require pheditor/pheditor:2.0.8

Affected

Fixed versions

Sources

• osv: GHSA-f25v-x6vr-962g
• https://github.com/pheditor/pheditor/security/advisories/GHSA-f25v-x6vr-962g
• https://github.com/pheditor/pheditor/commit/0978bcda644832b67357340e2f271e32d86fdf86
• https://github.com/pheditor/pheditor
• https://github.com/pheditor/pheditor/releases/tag/2.0.8

published 2026-07-24T21:54:24Z · modified 2026-07-24T22:00:26.967609656Z · JSON