Security Advisories - bytefury/crater - Packagist

bytefury/crater Security Advisories for 4.0.4 (4)

Cross-site Scripting in Crater Invoice

CVE-2022-0372

Affected version: <6.0.0

Reported by:
GitHub
Missing Authorization in Crater Invoice

CVE-2022-0203

Affected version: <6.0.2

Reported by:
GitHub
crater is vulnerable to Unrestricted Upload of File with Dangerous Type

CVE-2021-4080

Affected version: <6.0.0

Reported by:
GitHub
Unrestricted Upload of File with Dangerous Type in Crater

CVE-2022-0242

Affected version: <6.0

Reported by:
GitHub