Packagist/appwrite/server-ce CVE-2021-23682: critical 9.8, EPSS 2.12%
Prototype Pollution in litespeed.js and appwrite/server-ce
Action: Upgrade appwrite/server-ce to 0.11.1 or later.
composer require appwrite/server-ce:0.12.2composer require appwrite/server-ce:0.11.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.12.0 | 0.12.2 | - |
| 0 | 0.11.1 | - |
Fixed versions
| 0.12.2 | 0.11.1 |
Sources
- osv: GHSA-v9p9-535w-4285#Packagist/appwrite/server-ce
- https://nvd.nist.gov/vuln/detail/CVE-2021-23682
- https://github.com/appwrite/appwrite/pull/2778
- https://github.com/litespeed-js/litespeed.js/pull/18
- https://github.com/appwrite/appwrite/releases/tag/0.11.1
- https://github.com/appwrite/appwrite/releases/tag/0.12.2
- https://snyk.io/vuln/SNYK-JS-LITESPEEDJS-2359250
- https://snyk.io/vuln/SNYK-PHP-APPWRITESERVERCE-2401820
CVE-2021-23682 · published · modified · JSON