Packagist/passbolt/passbolt_api: medium 4.4
Passbolt Api E-mail HTML injection
Action: Upgrade passbolt/passbolt_api to 2.7.0 or later.
composer require passbolt/passbolt_api:2.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.0 | - |
Fixed versions
| 2.7.0 |
Sources
- osv: GHSA-v86m-j5f7-ccwh
- https://github.com/passbolt/passbolt_api/commit/00f0ebe37d78815adee26d5e80cf2250fe878647
- https://github.com/FriendsOfPHP/security-advisories/blob/master/passbolt/passbolt_api/2019-02-11-3.yaml
- https://github.com/passbolt/passbolt_api
- https://www.passbolt.com/incidents/20190211_multiple_vulnerabilities
published · modified · JSON