CVE-2024-34515
1 advisory.
Packagist/spatie/image-optimizer CVE-2024-34515: high 8.8
image-optimizer allows PHAR deserialization
Action: Upgrade spatie/image-optimizer to 1.7.3 or later.
composer require spatie/image-optimizer:1.7.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.3 | - |
Fixed versions
| 1.7.3 |
Sources
- osv: GHSA-6pjm-hmvf-h4rr
- https://nvd.nist.gov/vuln/detail/CVE-2024-34515
- https://github.com/spatie/image-optimizer/issues/210
- https://github.com/spatie/image-optimizer/pull/211
- https://github.com/spatie/image-optimizer/commit/89847b55fbb44b3bcde0283bff8cc5abb5e51b82
- https://github.com/spatie/image-optimizer
- https://github.com/spatie/image-optimizer/compare/1.7.2...1.7.3
CVE-2024-34515 · published · modified · JSON