Packagist/getformwork/formwork: medium 4.7
Formwork has a cross-site scripting (XSS) vulnerability in Site title
Action: Upgrade getformwork/formwork to 2.0.0-beta.4 or later.
composer require getformwork/formwork:2.0.0-beta.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0-beta.3 | 2.0.0-beta.4 | - |
Fixed versions
| 2.0.0-beta.4 |
Sources
- osv: GHSA-vf6x-59hh-332f
- https://github.com/getformwork/formwork/security/advisories/GHSA-vf6x-59hh-332f
- https://github.com/getformwork/formwork/commit/aa3e9c684035d9e8495169fde7c57d97faa3f9a2
- https://github.com/getformwork/formwork
published · modified · JSON