Packagist/gos/web-socket-bundle: medium 5.9
Potentially sensitive data exposure in Symfony Web Socket Bundle
Action: Upgrade gos/web-socket-bundle to 1.10.4 or later.
composer require gos/web-socket-bundle:1.10.4composer require gos/web-socket-bundle:2.6.1composer require gos/web-socket-bundle:3.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.10.4 | - |
| 2.0.0 | 2.6.1 | - |
| 3.0.0 | 3.3.0 | - |
Fixed versions
| 1.10.4 | 2.6.1 | 3.3.0 |
Sources
- osv: GHSA-wwgf-3xp7-cxj4
- https://github.com/GeniusesOfSymfony/WebSocketBundle/security/advisories/GHSA-wwgf-3xp7-cxj4
- https://github.com/FriendsOfPHP/security-advisories/commit/942fd37245cb724ba8cc8d6f11f075a1bd53b338
- https://github.com/GeniusesOfSymfony/WebSocketBundle
- https://snyk.io/vuln/SNYK-PHP-GOSWEBSOCKETBUNDLE-575401
published · modified · JSON