Packagist/nzo/url-encryptor-bundle: high
nzo/url-encryptor-bundle Insecure default secret key and IV allowing anyone to decrypt values
Action: Upgrade nzo/url-encryptor-bundle to 4.3.2 or later.
composer require nzo/url-encryptor-bundle:5.0.1composer require nzo/url-encryptor-bundle:4.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.1 | - |
| 4.0.0 | 4.3.2 | - |
Fixed versions
| 5.0.1 | 4.3.2 |
Sources
- osv: GHSA-r2r8-36pq-27cm
- https://github.com/nayzo/NzoUrlEncryptorBundle/commit/ba3af1a9bcf3bedcc0ed5948979f482e2134da1a
- https://github.com/nayzo/NzoUrlEncryptorBundle/commit/bd8232501c12c9df1bc45b1970870ef665218581
- https://github.com/FriendsOfPHP/security-advisories/blob/master/nzo/url-encryptor-bundle/2020-05-03.yaml
- https://github.com/nayzo/NzoUrlEncryptorBundle
published · modified · JSON