CVE-2025-60868
1 advisory.
Packagist/alt-design/alt-redirect CVE-2025-60868: medium 6.5
Alt Redirect: Potential Authentication Bypass by Spoofing through query-string stripping logic flaw
Action: Upgrade alt-design/alt-redirect to 1.6.4 or later.
composer require alt-design/alt-redirect:1.6.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.4 | - |
Fixed versions
| 1.6.4 |
Sources
- osv: GHSA-rpjr-pcmr-9ppw
- https://nvd.nist.gov/vuln/detail/CVE-2025-60868
- https://github.com/alt-design/Alt-Redirect-Addon/commit/5dc6753c7151ac994c63e18914998991b1f65cbd
- https://gist.github.com/kasiasok/870933de18d1400fa8be88e1bcadec6c
- https://github.com/alt-design/Alt-Redirect-Addon
- https://github.com/alt-design/Alt-Redirect-Addon/releases/tag/v1.6.4
- https://statamic.com/addons/alt-design/alt-redirects/release-notes
CVE-2025-60868 · published · modified · JSON