CVE-2021-32708
1 advisory.
Packagist/league/flysystem CVE-2021-32708: critical 9.8
Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem
Action: Upgrade league/flysystem to 1.1.4 or later.
composer require league/flysystem:1.1.4composer require league/flysystem:2.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.4 | - |
| 2.0.0 | 2.1.1 | - |
Fixed versions
| 1.1.4 | 2.1.1 |
Sources
- osv: GHSA-9f46-5r25-5wfm
- https://github.com/thephpleague/flysystem/security/advisories/GHSA-9f46-5r25-5wfm
- https://nvd.nist.gov/vuln/detail/CVE-2021-32708
- https://github.com/thephpleague/flysystem/commit/a3c694de9f7e844b76f9d1b61296ebf6e8d89d74
- https://github.com/thephpleague/flysystem/commit/f3ad69181b8afed2c9edf7be5a2918144ff4ea32
- https://github.com/FriendsOfPHP/security-advisories/blob/master/league/flysystem/CVE-2021-32708.yaml
- https://github.com/thephpleague/flysystem
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWPTENBYKI2IG47GI4DHAACLNRLTWUR5
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RNZSWK4GOMJOOHKLZEOE5AQSLC4DNCRZ
- https://packagist.org/packages/league/flysystem
CVE-2021-32708 · published · modified · JSON