CVE-2022-35921
1 advisory.
Packagist/fof/byobu CVE-2022-35921: low 3.5, EPSS 0.53%
Byobu user preference to prevent private discussions being started are not respected
Action: Upgrade fof/byobu to 1.1.7 or later.
composer require fof/byobu:1.1.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.3.0-beta.2 | 1.1.7 | - |
Fixed versions
| 1.1.7 |
Sources
- osv: GHSA-6gjm-6wj6-4px5
- https://github.com/FriendsOfFlarum/byobu/security/advisories/GHSA-6gjm-6wj6-4px5
- https://nvd.nist.gov/vuln/detail/CVE-2022-35921
- https://github.com/FriendsOfFlarum/byobu/commit/23dcf93a30f948d30c678a96681f7fdefeba5171
- https://github.com/FriendsOfFlarum/byobu
CVE-2022-35921 · published · modified · JSON