New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[SECURITY] Update `composer` and `psr7` to unaffected versions #129

Closed

mteu wants to merge 2 commits into eliashaeussler:main from mteu:security/update-nyholm-psr7

Collaborator

mteu commented Apr 30, 2024

This PR narrows the range of composer/composer to fix two vulnerabilities:

CVE-2024-24821 (high)
CVE-2023-43655 (high)

It also bumps nyholm/psr to an unaffected version starting from^1.5.1:

CVE-2023-29197 (high)

mteu added 2 commits

April 30, 2024 10:34


          [SECURITY] Lower range for composer/composer to unaffected versions

c7c1f7e


          [SECURITY] Update nyholm/psr7 to unaffected version ^1.5.1

85054b0

mteu added the security label

mteu requested a review from eliashaeussler

April 30, 2024 08:39

mteu closed this

mteu deleted the security/update-nyholm-psr7 branch

September 10, 2024 06:29

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels