Packagist/symbiote/silverstripe-multivaluefield: medium 6.1
symbiote/silverstripe-multivaluefield Possible PHP Object Injection via Multi-Value Field Extension
Action: Upgrade symbiote/silverstripe-multivaluefield to 3.1.0 or later.
composer require symbiote/silverstripe-multivaluefield:3.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: GHSA-g5vj-wj9x-4jg9
- https://github.com/symbiote/silverstripe-multivaluefield/commit/31fbc8c208431fc7d7e96da6fa39ca057d978953
- https://github.com/symbiote/silverstripe-multivaluefield/commit/f523dfcb13b2bd9eb110ffa0c83087a49322ad3b
- https://github.com/FriendsOfPHP/security-advisories/blob/master/symbiote/silverstripe-multivaluefield/SS-2018-017-1.yaml
- https://github.com/symbiote/silverstripe-multivaluefield
- https://www.silverstripe.org/download/security-releases/ss-2018-017
published · modified · JSON