Packagist/bytefury/crater CVE-2021-4080: high 8.8, EPSS 1.47%
crater is vulnerable to Unrestricted Upload of File with Dangerous Type
Action: Upgrade bytefury/crater to 6.0.0 or later.
composer require bytefury/crater:6.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.0.0 | - |
Fixed versions
| 6.0.0 |
Sources
- osv: GHSA-wppj-3pjr-9w79
- https://nvd.nist.gov/vuln/detail/CVE-2021-4080
- https://github.com/crater-invoice/crater/commit/cdc913d16cf624aee852bc9163a7c6ffc8d1da9d
- https://github.com/crater-invoice/crater
- https://huntr.dev/bounties/d7453360-baca-4e56-985f-481275fa38db
CVE-2021-4080 · published · modified · JSON