Packagist/silverstripe/graphql: high 7.3
silverstripe/graphql Cross-Site Request Forgery vulnerability
Action: Upgrade silverstripe/graphql to 2.0.3 or later.
composer require silverstripe/graphql:2.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.0.3 | - |
Fixed versions
| 2.0.3 |
Sources
- osv: GHSA-wjg9-v8cf-f5q2
- https://github.com/silverstripe/silverstripe-graphql/commit/b59ba397ff42d8934bd2d9c932514f898c327f64
- https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/graphql/SS-2018-007-1.yaml
- https://github.com/silverstripe/silverstripe-graphql
- https://www.silverstripe.org/download/security-releases/ss-2018-007
published · modified · JSON