Packagist/simplesamlphp/simplesamlphp: medium 5.4
SimpleSAMLphp Link Injection vulnerability
Action: Upgrade simplesamlphp/simplesamlphp to 1.14.4 or later.
composer require simplesamlphp/simplesamlphp:1.14.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.14.4 | - |
Fixed versions
| 1.14.4 |
Sources
- osv: GHSA-v858-922f-fj9v
- https://github.com/simplesamlphp/simplesamlphp/commit/b1af4e47c81bca2bee633b3f84f4fde624f359ba
- https://github.com/simplesamlphp/simplesamlphp/commit/d26eb8f17dc9916a5ef2fd0a286b0fc96a561e71
- https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/201606-01.yaml
- https://github.com/simplesamlphp/simplesamlphp
- https://simplesamlphp.org/security/201606-01
published · modified · JSON