CVE-2024-29800
1 advisory.
Packagist/timber/timber CVE-2024-29800: high 8, EPSS 0.45%
timber/timber vulnerable to Deserialization of Untrusted Data
Action: Upgrade timber/timber to 1.23.1 or later.
composer require timber/timber:2.1.0composer require timber/timber:1.24.1composer require timber/timber:1.23.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.1.0 | - |
| 1.24.0 | 1.24.1 | - |
| 0.16.6 | 1.23.1 | - |
Fixed versions
| 2.1.0 | 1.24.1 | 1.23.1 |
Sources
- osv: GHSA-6363-v5m4-fvq3
- https://github.com/timber/timber/security/advisories/GHSA-6363-v5m4-fvq3
- https://github.com/timber/timber/issues/2971
- https://github.com/timber/timber/commit/13c6b0f60346304f2eed4da1e0bb51566518de4a
- https://github.com/FriendsOfPHP/security-advisories/blob/master/timber/timber/CVE-2024-29800.yaml
- https://github.com/timber/timber
CVE-2024-29800 · published · modified · JSON