CVE-2022-31140
1 advisory.
Packagist/cuyz/valinor CVE-2022-31140: high 7.5
Valinor error messages leading to potential data exfiltration before v0.12.0
Action: Upgrade cuyz/valinor to 0.12.0 or later.
composer require cuyz/valinor:0.12.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.12.0 | - |
Fixed versions
| 0.12.0 |
Sources
- osv: GHSA-5pgm-3j3g-2rc7
- https://github.com/CuyZ/Valinor/security/advisories/GHSA-5pgm-3j3g-2rc7
- https://nvd.nist.gov/vuln/detail/CVE-2022-31140
- https://github.com/CuyZ/Valinor
- https://github.com/CuyZ/Valinor/releases/tag/0.12.0
CVE-2022-31140 · published · modified · JSON