CVE-2023-29530
1 advisory.
Packagist/laminas/laminas-diactoros CVE-2023-29530: high 7.5, EPSS 0.97%
HTTP Multiline Header Termination
Action: Upgrade laminas/laminas-diactoros to 2.18.1 or later.
composer require laminas/laminas-diactoros:2.18.1composer require laminas/laminas-diactoros:2.19.1composer require laminas/laminas-diactoros:2.20.1composer require laminas/laminas-diactoros:2.21.1composer require laminas/laminas-diactoros:2.22.1composer require laminas/laminas-diactoros:2.23.1composer require laminas/laminas-diactoros:2.24.2composer require laminas/laminas-diactoros:2.25.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.18.1 | - |
| 2.19.0 | 2.19.1 | - |
| 2.20.0 | 2.20.1 | - |
| 2.21.0 | 2.21.1 | - |
| 2.22.0 | 2.22.1 | - |
| 2.23.0 | 2.23.1 | - |
| 2.24.0 | 2.24.2 | - |
| 2.25.0 | 2.25.2 | - |
Fixed versions
| 2.18.1 | 2.19.1 | 2.20.1 | 2.21.1 | 2.22.1 | 2.23.1 | 2.24.2 | 2.25.2 |
Sources
- osv: GHSA-xv3h-4844-9h36
- https://github.com/laminas/laminas-diactoros/security/advisories/GHSA-xv3h-4844-9h36
- https://nvd.nist.gov/vuln/detail/CVE-2023-29530
- https://github.com/laminas/laminas-diactoros/commit/7e721a60a09c5119c98694c2d23fc031094e1f1c
- https://github.com/advisories/GHSA-wxmh-65f7-jcvw
- https://github.com/laminas/laminas-diactoros
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPW54QK7ISDALPLP2CKODU4ZIVRYS336
CVE-2023-29530 · published · modified · JSON