New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Flag Packagist.org package as vulnerable #21

Open

lucasmirloup opened this issue Jun 21, 2023 · 1 comment

lucasmirloup commented Jun 21, 2023

Hi 👋

If I'm not mistaken, this package uses ElFinder < 2.1.58.
These versions are affected by 3 active CVEs : CVE-2021-23394, CVE-2021-32682 & CVE-2023-35840.

I'm aware that this package is deprecated, but could it be possible to flag all its versions as "vulnerable" on Packagist.org please ?

Thank you.

Author

lucasmirloup commented Jun 21, 2023

I may have opened an issue in the wrong repository, is helios-ag/fm-elfinder-php-connector the one that is vulnerable ? Both of them ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment