CVE-2019-15489
1 advisory.
Packagist/jsdecena/laracom CVE-2019-15489: medium 6.1, EPSS 0.88%
laracom Cross-site Scripting
Action: Upgrade jsdecena/laracom to 1.5.0 or later.
composer require jsdecena/laracom:1.5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.11 | 1.5.0 | - |
Fixed versions
| 1.5.0 |
Sources
- osv: GHSA-qc2p-6qrf-25j2
- https://nvd.nist.gov/vuln/detail/CVE-2019-15489
- https://github.com/Laracommerce/laracom/pull/211
- https://github.com/jsdecena/laracom/commit/36ff6a5c4a7878c719304e9d9a5f1fc74a5af474
- https://github.com/jsdecena/laracom
CVE-2019-15489 · published · modified · JSON