Packagist/endroid/qr-code-bundle: medium
endroid/qr-code-bundle File Disclosure via logo_path query parameter
Action: Upgrade endroid/qr-code-bundle to 3.4.2 or later.
composer require endroid/qr-code-bundle:3.4.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.4.2 | - |
Fixed versions
| 3.4.2 |
Sources
- osv: GHSA-mvf6-3f2g-xfxf
- https://github.com/endroid/qr-code-bundle/commit/51928eaaa30e7db1fd3f1076744dcbc8f8cec8c8
- https://github.com/FriendsOfPHP/security-advisories/blob/master/endroid/qr-code-bundle/2019-12-22.yaml
- https://github.com/endroid/qr-code-bundle
- https://github.com/endroid/qr-code-bundle/releases/tag/3.4.2
published · modified · JSON