CVE-2023-37473
1 advisory.
Packagist/zenstruck/collection CVE-2023-37473: high 8.5
zenstruck/collection passing callable string to EntityRepository::find() and query()
Action: Upgrade zenstruck/collection to 0.2.1 or later.
composer require zenstruck/collection:0.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.1 | - |
Fixed versions
| 0.2.1 |
Sources
- osv: GHSA-7xr2-8ff7-6fjq
- https://github.com/zenstruck/collection/security/advisories/GHSA-7xr2-8ff7-6fjq
- https://nvd.nist.gov/vuln/detail/CVE-2023-37473
- https://github.com/zenstruck/collection/commit/f4b1c488206e1b1581b06fcd331686846f13f19c
- https://github.com/zenstruck/collection
- https://github.com/zenstruck/collection/releases/tag/v0.2.1
CVE-2023-37473 · published · modified · JSON