CVE-2024-38516
1 advisory.
Packagist/aimeos/ai-client-html CVE-2024-38516: high 8.8
Aimeos HTML client may potentially reveal sensitive information in error log
Action: Upgrade aimeos/ai-client-html to 2021.10.22 or later.
composer require aimeos/ai-client-html:2024.04.7composer require aimeos/ai-client-html:2023.10.15composer require aimeos/ai-client-html:2022.10.13composer require aimeos/ai-client-html:2021.10.22Affected
| introduced | fixed | last affected |
|---|---|---|
| 2024.04.1 | 2024.04.7 | - |
| 2023.04.1 | 2023.10.15 | - |
| 2022.04.1 | 2022.10.13 | - |
| 2021.10.1 | 2021.10.22 | - |
Fixed versions
| 2024.04.7 | 2023.10.15 | 2022.10.13 | 2021.10.22 |
Sources
- osv: GHSA-ppm5-jv84-2xg2
- https://github.com/aimeos/ai-client-html/security/advisories/GHSA-ppm5-jv84-2xg2
- https://nvd.nist.gov/vuln/detail/CVE-2024-38516
- https://github.com/aimeos/ai-client-html/commit/bb389620ffc3cf4a2f29c11a1e5f512049e0c132
- https://github.com/aimeos/ai-client-html
CVE-2024-38516 · published · modified · JSON