CVE-2017-0907
1 advisory.
NuGet/recurly-api-client CVE-2017-0907: critical, EPSS 2.59%
Critical severity vulnerability that affects recurly-api-client
Action: Upgrade recurly-api-client to 1.0.1 (1.0.x), 1.1.10 (1.1.x), 1.2.8 (1.2.x), 1.3.2 (1.3.x), 1.4.14 (1.4.x), 1.5.3 (1.5.x), 1.6.2 (1.6.x), 1.7.1 (1.7.x) or 1.8.1 (1.8.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.1 | - |
| 1.1.0 | 1.1.10 | - |
| 1.2.0 | 1.2.8 | - |
| 1.3.0 | 1.3.2 | - |
| 1.4.0 | 1.4.14 | - |
| 1.5.0 | 1.5.3 | - |
| 1.6.0 | 1.6.2 | - |
| 1.7.0 | 1.7.1 | - |
| 1.8.0 | 1.8.1 | - |
Fixed versions
| 1.0.1 | 1.1.10 | 1.2.8 | 1.3.2 | 1.4.14 | 1.5.3 | 1.6.2 | 1.7.1 | 1.8.1 |
Sources
- osv: GHSA-xpwp-rq3x-x6v7
- https://nvd.nist.gov/vuln/detail/CVE-2017-0907
- https://github.com/recurly/recurly-client-net/commit/9eef460c0084afd5c24d66220c8b7a381cf9a1f1
- https://hackerone.com/reports/288635
- https://dev.recurly.com/page/net-updates
- https://github.com/advisories/GHSA-xpwp-rq3x-x6v7
CVE-2017-0907 · published · modified · JSON