Packagist/typo3/neos: high
typo3 Information Disclosure Security Note
Action: Upgrade typo3/neos to 2.3.99 or later.
composer require typo3/neos:2.3.99composer require typo3/neos:3.0.20composer require typo3/neos:3.1.18composer require typo3/neos:3.2.14composer require typo3/neos:3.3.23composer require typo3/neos:4.0.17composer require typo3/neos:4.1.16composer require typo3/neos:4.2.12composer require typo3/neos:4.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3.0 | 2.3.99 | - |
| 3.0.0 | 3.0.20 | - |
| 3.1.0 | 3.1.18 | - |
| 3.2.0 | 3.2.14 | - |
| 3.3.0 | 3.3.23 | - |
| 4.0.0 | 4.0.17 | - |
| 4.1.0 | 4.1.16 | - |
| 4.2.0 | 4.2.12 | - |
| 4.3.0 | 4.3.3 | - |
Fixed versions
| 2.3.99 | 3.0.20 | 3.1.18 | 3.2.14 | 3.3.23 | 4.0.17 | 4.1.16 | 4.2.12 | 4.3.3 |
Sources
- osv: GHSA-g4xv-r3qw-v3q2
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/neos/2019-06-17.yaml
- https://github.com/mneuhaus/TYPO3.Neos
- https://www.neos.io/blog/neos-workspace-disclosure-security.html
published · modified · JSON