Packagist/monolog/monolog: low
Monolog Header injection in NativeMailerHandler
Action: Upgrade monolog/monolog to 1.12.0 or later.
composer require monolog/monolog:1.12.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.8.0 | 1.12.0 | - |
Fixed versions
| 1.12.0 |
Sources
- osv: GHSA-f57v-q966-7fh6
- https://github.com/Seldaek/monolog/issues/458
- https://github.com/Seldaek/monolog/pull/448#issuecomment-68208704
- https://github.com/Seldaek/monolog/commit/515a096c864b00b3967f7f601680f85d4a2e4001
- https://github.com/FriendsOfPHP/security-advisories/blob/master/monolog/monolog/2014-12-29-1.yaml
- https://github.com/Seldaek/monolog
published · modified · JSON