mirror of
https://github.com/flarum/core.git
synced 2025-08-06 00:17:31 +02:00
Patch vulnerability advisory (#3966)
Seems composer has a vulnerability, see https://github.com/advisories/GHSA-7c6p-848j-wh5h
Affected versions
>= 2.0.0-alpha1, < 2.2.23 -- patched in 2.2.23
>= 2.3.0-rc1, < 2.7.0 -- patched in 2.7.0
---
Let's raise the minimum to enforce the latest.
Thank you @peopleinside for reporting this.
(cherry picked from commit e771b908d5
)
This commit is contained in:
committed by
Sami Mazouz
parent
b2044ff312
commit
a52959ccf2
@@ -23,7 +23,7 @@
|
||||
},
|
||||
"require": {
|
||||
"flarum/core": "^1.8",
|
||||
"composer/composer": "^2.3"
|
||||
"composer/composer": "^2.7"
|
||||
},
|
||||
"require-dev": {
|
||||
"flarum/testing": "^1.0.0",
|
||||
|
Reference in New Issue
Block a user