roave/security-advisories

Prevents installation of composer packages with known security vulnerabilities: no API, simply require it

dev-latest 2023-09-29 21:04 UTC

Conflicts

• 3f/pygmentize: <1.2
• admidio/admidio: <4.2.11
• adodb/adodb-php: <=5.20.20|>=5.21,<=5.21.3
• aheinze/cockpit: <2.2
• aimeos/aimeos-typo3: <19.10.12|>=20,<20.10.5
• akaunting/akaunting: <2.1.13
• akeneo/pim-community-dev: <5.0.119|>=6,<6.0.53
• alextselegidis/easyappointments: <1.5
• alterphp/easyadmin-extension-bundle: >=1.2,<1.2.11|>=1.3,<1.3.1
• amazing/media2click: >=1,<1.3.3
• amphp/artax: <1.0.6|>=2,<2.0.6
• amphp/http: <1.0.1
• amphp/http-client: >=4,<4.4
• anchorcms/anchor-cms: <=0.12.7
• andreapollastri/cipi: <=3.1.15
• andrewhaine/silverstripe-form-capture: >=0.2,<=0.2.3|>=1,<1.0.2|>=2,<2.2.5
• apache-solr-for-typo3/solr: <2.8.3
• apereo/phpcas: <1.6
• api-platform/core: >=2.2,<2.2.10|>=2.3,<2.3.6|>=2.6,<2.7.10|>=3,<3.0.12|>=3.1,<3.1.3
• appwrite/server-ce: <=1.2.1
• arc/web: <3
• area17/twill: <1.2.5|>=2,<2.5.3
• artesaos/seotools: <0.17.2
• asymmetricrypt/asymmetricrypt: <9.9.99
• athlon1600/php-proxy: <=5.1
• athlon1600/php-proxy-app: <=3
• austintoddj/canvas: <=3.4.2
• automad/automad: <1.8
• awesome-support/awesome-support: <=6.0.7
• aws/aws-sdk-php: >=3,<3.2.1
• azuracast/azuracast: <0.18.3
• backdrop/backdrop: <1.24.2
• backpack/crud: <3.4.9
• badaso/core: <2.7
• bagisto/bagisto: <0.1.5
• barrelstrength/sprout-base-email: <1.2.7
• barrelstrength/sprout-forms: <3.9
• barryvdh/laravel-translation-manager: <0.6.2
• barzahlen/barzahlen-php: <2.0.1
• baserproject/basercms: <4.7.5
• bassjobsen/bootstrap-3-typeahead: >4.0.2
• bigfork/silverstripe-form-capture: >=3,<3.1.1
• billz/raspap-webgui: <=2.9.2
• bk2k/bootstrap-package: >=7.1,<7.1.2|>=8,<8.0.8|>=9,<9.0.4|>=9.1,<9.1.3|>=10,<10.0.10|>=11,<11.0.3
• bmarshall511/wordpress_zero_spam: <5.2.13
• bolt/bolt: <3.7.2
• bolt/core: <=4.2
• bottelet/flarepoint: <2.2.1
• brightlocal/phpwhois: <=4.2.5
• brotkrueml/codehighlight: <2.7
• brotkrueml/schema: <1.13.1|>=2,<2.5.1
• brotkrueml/typo3-matomo-integration: <1.3.2
• buddypress/buddypress: <7.2.1
• bugsnag/bugsnag-laravel: <2.0.2
• bytefury/crater: <6.0.2
• cachethq/cachet: <2.5.1
• cakephp/cakephp: <3.10.3|>=4,<4.0.10|>=4.1,<4.1.4|>=4.2,<4.2.12|>=4.3,<4.3.11|>=4.4,<4.4.10
• cakephp/database: >=4.2,<4.2.12|>=4.3,<4.3.11|>=4.4,<4.4.10
• cardgate/magento2: <2.0.33
• cardgate/woocommerce: <=3.1.15
• cart2quote/module-quotation: >=4.1.6,<=4.4.5|>=5,<5.4.4
• cartalyst/sentry: <=2.1.6
• catfan/medoo: <1.7.5
• cecil/cecil: <7.47.1
• centreon/centreon: <22.10.0.0-beta1
• cesnet/simplesamlphp-module-proxystatistics: <3.1
• chriskacerguis/codeigniter-restserver: <=2.7.1
• civicrm/civicrm-core: >=4.2,<4.2.9|>=4.3,<4.3.3
• cockpit-hq/cockpit: <=2.6.3
• codeception/codeception: <3.1.3|>=4,<4.1.22
• codeigniter/framework: <3.1.9
• codeigniter4/framework: <4.3.5
• codeigniter4/shield: <1.0.0.0-beta4
• codiad/codiad: <=2.8.4
• composer/composer: <1.10.27|>=2,<2.2.22|>=2.3,<2.6.4
• concrete5/concrete5: <9.2
• concrete5/core: <8.5.8|>=9,<9.1
• contao-components/mediaelement: >=2.14.2,<2.21.1
• contao/contao: >=4,<4.4.56|>=4.5,<4.9.40|>=4.10,<4.11.7|>=4.13,<4.13.21|>=5.1,<5.1.4
• contao/core: >=2,<3.5.39
• contao/core-bundle: <4.9.42|>=4.10,<4.13.28|>=5,<5.1.10
• contao/listing-bundle: >=4,<4.4.8
• contao/managed-edition: <=1.5
• cosenary/instagram: <=2.3
• craftcms/cms: <=4.4.14
• croogo/croogo: <4
• cuyz/valinor: <0.12
• czproject/git-php: <4.0.3
• darylldoyle/safe-svg: <1.9.10
• datadog/dd-trace: >=0.30,<0.30.2
• datatables/datatables: <1.10.10
• david-garcia/phpwhois: <=4.3.1
• dbrisinajumi/d2files: <1
• dcat/laravel-admin: <=2.1.3.0-beta
• derhansen/fe_change_pwd: <2.0.5|>=3,<3.0.3
• derhansen/sf_event_mgt: <4.3.1|>=5,<5.1.1
• desperado/xml-bundle: <=0.1.7
• directmailteam/direct-mail: <5.2.4
• doctrine/annotations: >=1,<1.2.7
• doctrine/cache: >=1,<1.3.2|>=1.4,<1.4.2
• doctrine/common: >=2,<2.4.3|>=2.5,<2.5.1
• doctrine/dbal: >=2,<2.0.8|>=2.1,<2.1.2|>=3,<3.1.4
• doctrine/doctrine-bundle: <1.5.2
• doctrine/doctrine-module: <=0.7.1
• doctrine/mongodb-odm: >=1,<1.0.2
• doctrine/mongodb-odm-bundle: >=2,<3.0.1
• doctrine/orm: >=2,<2.4.8|>=2.5,<2.5.1|>=2.8.3,<2.8.4
• dolibarr/dolibarr: <17.0.1
• dompdf/dompdf: <2.0.2|==2.0.2
• drupal/core: <9.4.14|>=9.5,<9.5.8|>=10,<10.0.8
• drupal/drupal: >=6,<6.38|>=7,<7.80|>=8,<8.9.16|>=9,<9.1.12|>=9.2,<9.2.4
• dweeves/magmi: <=0.7.24
• ecodev/newsletter: <=4
• ectouch/ectouch: <=2.7.2
• elefant/cms: <2.0.7
• elgg/elgg: <3.3.24|>=4,<4.0.5
• encore/laravel-admin: <=1.8.19
• endroid/qr-code-bundle: <3.4.2
• enshrined/svg-sanitize: <0.15
• erusev/parsedown: <1.7.2
• ether/logs: <3.0.4
• exceedone/exment: <4.4.3|>=5,<5.0.3
• exceedone/laravel-admin: <2.2.3|==3
• ezsystems/demobundle: >=5.4,<5.4.6.1-dev
• ezsystems/ez-support-tools: >=2.2,<2.2.3
• ezsystems/ezdemo-ls-extension: >=5.4,<5.4.2.1-dev
• ezsystems/ezfind-ls: >=5.3,<5.3.6.1-dev|>=5.4,<5.4.11.1-dev|>=2017.12,<2017.12.0.1-dev
• ezsystems/ezplatform: <=1.13.6|>=2,<=2.5.24
• ezsystems/ezplatform-admin-ui: >=1.3,<1.3.5|>=1.4,<1.4.6|>=1.5,<1.5.29|>=2.3,<2.3.26
• ezsystems/ezplatform-admin-ui-assets: >=4,<4.2.1|>=5,<5.0.1|>=5.1,<5.1.1
• ezsystems/ezplatform-graphql: >=1.0.0.0-RC1-dev,<1.0.13|>=2.0.0.0-beta1,<2.3.12
• ezsystems/ezplatform-kernel: <1.2.5.1-dev|>=1.3,<1.3.26
• ezsystems/ezplatform-rest: >=1.2,<=1.2.2|>=1.3,<1.3.8
• ezsystems/ezplatform-richtext: >=2.3,<2.3.7.1-dev
• ezsystems/ezplatform-user: >=1,<1.0.1
• ezsystems/ezpublish-kernel: <6.13.8.2-dev|>=7,<7.5.30
• ezsystems/ezpublish-legacy: <=2017.12.7.3|>=2018.6,<=2019.03.5.1
• ezsystems/platform-ui-assets-bundle: >=4.2,<4.2.3
• ezsystems/repository-forms: >=2.3,<2.3.2.1-dev|>=2.5,<2.5.15
• ezyang/htmlpurifier: <4.1.1
• facade/ignition: <1.16.15|>=2,<2.4.2|>=2.5,<2.5.2
• facturascripts/facturascripts: <=2022.08
• feehi/cms: <=2.1.1
• feehi/feehicms: <=2.1.1
• fenom/fenom: <=2.12.1
• filegator/filegator: <7.8
• firebase/php-jwt: <6
• fixpunkt/fp-masterquiz: <2.2.1|>=3,<3.5.2
• fixpunkt/fp-newsletter: <1.1.1|>=2,<2.1.2|>=2.2,<3.2.6
• flarum/core: <1.8
• flarum/framework: <1.8
• flarum/mentions: <1.6.3
• flarum/sticky: >=0.1.0.0-beta14,<=0.1.0.0-beta15
• flarum/tags: <=0.1.0.0-beta13
• fluidtypo3/vhs: <5.1.1
• fof/byobu: >=0.3.0.0-beta2,<1.1.7
• fof/upload: <1.2.3
• fooman/tcpdf: <6.2.22
• forkcms/forkcms: <5.11.1
• fossar/tcpdf-parser: <6.2.22
• francoisjacquet/rosariosis: <11
• frappant/frp-form-answers: <3.1.2|>=4,<4.0.2
• friendsofsymfony/oauth2-php: <1.3
• friendsofsymfony/rest-bundle: >=1.2,<1.2.2
• friendsofsymfony/user-bundle: >=1.2,<1.3.5
• friendsoftypo3/mediace: >=7.6.2,<7.6.5
• friendsoftypo3/openid: >=4.5,<4.5.31|>=4.7,<4.7.16|>=6,<6.0.11|>=6.1,<6.1.6
• froala/wysiwyg-editor: <3.2.7|>=4.0.1,<=4.1.1
• froxlor/froxlor: <2.1
• fuel/core: <1.8.1
• funadmin/funadmin: <=3.2|>=3.3.2,<=3.3.3
• gaoming13/wechat-php-sdk: <=1.10.2
• genix/cms: <=1.1.11
• getgrav/grav: <=1.7.42.1
• getkirby/cms: <3.5.8.3-dev|>=3.6,<3.6.6.3-dev|>=3.7,<3.7.5.2-dev|>=3.8,<3.8.4.1-dev|>=3.9,<3.9.6
• getkirby/kirby: <=2.5.12
• getkirby/panel: <2.5.14
• getkirby/starterkit: <=3.7.0.2
• gilacms/gila: <=1.11.4
• gleez/cms: <=1.2|==2
• globalpayments/php-sdk: <2
• gogentooss/samlbase: <1.2.7
• google/protobuf: <3.15
• gos/web-socket-bundle: <1.10.4|>=2,<2.6.1|>=3,<3.3
• gree/jose: <2.2.1
• gregwar/rst: <1.0.3
• grumpydictator/firefly-iii: <6
• gugoan/economizzer: <=0.9.0.0-beta1
• guzzlehttp/guzzle: <6.5.8|>=7,<7.4.5
• guzzlehttp/psr7: <1.9.1|>=2,<2.4.5
• haffner/jh_captcha: <=2.1.3|>=3,<=3.0.2
• harvesthq/chosen: <1.8.7
• helloxz/imgurl: <=2.31
• hhxsv5/laravel-s: <3.7.36
• hillelcoren/invoice-ninja: <5.3.35
• himiklab/yii2-jqgrid-widget: <1.0.8
• hjue/justwriting: <=1
• hov/jobfair: <1.0.13|>=2,<2.0.2
• httpsoft/http-message: <1.0.12
• hyn/multi-tenant: >=5.6,<5.7.2
• ibexa/admin-ui: >=4.2,<4.2.3
• ibexa/core: >=4,<4.0.7|>=4.1,<4.1.4|>=4.2,<4.2.3
• ibexa/graphql: >=2.5,<2.5.31|>=3.3,<3.3.28|>=4.2,<4.2.3
• ibexa/post-install: <=1.0.4
• ibexa/user: >=4,<4.4.3
• icecoder/icecoder: <=8.1
• idno/known: <=1.3.1
• illuminate/auth: >=4,<4.0.99|>=4.1,<=4.1.31|>=4.2,<=4.2.22|>=5,<=5.0.35|>=5.1,<=5.1.46|>=5.2,<=5.2.45|>=5.3,<=5.3.31|>=5.4,<=5.4.36|>=5.5,<5.5.10
• illuminate/cookie: >=4,<=4.0.11|>=4.1,<=4.1.99999|>=4.2,<=4.2.99999|>=5,<=5.0.99999|>=5.1,<=5.1.99999|>=5.2,<=5.2.99999|>=5.3,<=5.3.99999|>=5.4,<=5.4.99999|>=5.5,<=5.5.49|>=5.6,<=5.6.99999|>=5.7,<=5.7.99999|>=5.8,<=5.8.99999|>=6,<6.18.31|>=7,<7.22.4
• illuminate/database: <6.20.26|>=7,<7.30.5|>=8,<8.40
• illuminate/encryption: >=4,<=4.0.11|>=4.1,<=4.1.31|>=4.2,<=4.2.22|>=5,<=5.0.35|>=5.1,<=5.1.46|>=5.2,<=5.2.45|>=5.3,<=5.3.31|>=5.4,<=5.4.36|>=5.5,<5.5.40|>=5.6,<5.6.15
• illuminate/view: <6.20.42|>=7,<7.30.6|>=8,<8.75
• impresscms/impresscms: <=1.4.5
• in2code/femanager: <5.5.3|>=6,<6.3.4|>=7,<7.1
• in2code/ipandlanguageredirect: <5.1.2
• in2code/lux: <17.6.1|>=18,<24.0.2
• innologi/typo3-appointments: <2.0.6
• intelliants/subrion: <4.2.2
• islandora/islandora: >=2,<2.4.1
• ivankristianto/phpwhois: <=4.3
• jackalope/jackalope-doctrine-dbal: <1.7.4
• james-heinrich/getid3: <1.9.21
• james-heinrich/phpthumb: <1.7.12
• jasig/phpcas: <1.3.3
• jcbrand/converse.js: <3.3.3
• joomla/application: <1.0.13
• joomla/archive: <1.1.12|>=2,<2.0.1
• joomla/filesystem: <1.6.2|>=2,<2.0.1
• joomla/filter: <1.4.4|>=2,<2.0.1
• joomla/framework: >=2.5.4,<=3.8.12
• joomla/input: >=2,<2.0.2
• joomla/joomla-cms: <3.9.12
• joomla/session: <1.3.1
• joyqi/hyper-down: <=2.4.27
• jsdecena/laracom: <2.0.9
• jsmitty12/phpwhois: <5.1
• kazist/phpwhois: <=4.2.6
• kelvinmo/simplexrd: <3.1.1
• kevinpapst/kimai2: <1.16.7
• khodakhah/nodcms: <=3
• kimai/kimai: <1.1
• kitodo/presentation: <3.2.3|>=3.3,<3.3.4
• klaviyo/magento2-extension: >=1,<3
• knplabs/knp-snappy: <=1.4.2
• kohana/core: <3.3.3
• krayin/laravel-crm: <1.2.2
• kreait/firebase-php: >=3.2,<3.8.1
• la-haute-societe/tcpdf: <6.2.22
• laminas/laminas-diactoros: <2.18.1|==2.19|==2.20|==2.21|==2.22|==2.23|>=2.24,<2.24.2|>=2.25,<2.25.2
• laminas/laminas-form: <2.17.1|>=3,<3.0.2|>=3.1,<3.1.1
• laminas/laminas-http: <2.14.2
• laravel/fortify: <1.11.1
• laravel/framework: <6.20.44|>=7,<7.30.6|>=8,<8.75
• laravel/socialite: >=1,<1.0.99|>=2,<2.0.10
• latte/latte: <2.10.8
• lavalite/cms: <=9
• lcobucci/jwt: >=3.4,<3.4.6|>=4,<4.0.4|>=4.1,<4.1.5
• league/commonmark: <0.18.3
• league/flysystem: <1.1.4|>=2,<2.1.1
• league/oauth2-server: >=8.3.2,<8.4.2|>=8.5,<8.5.3
• lexik/jwt-authentication-bundle: <2.10.7|>=2.11,<2.11.3
• librenms/librenms: <2017.08.18
• liftkit/database: <2.13.2
• limesurvey/limesurvey: <3.27.19
• livehelperchat/livehelperchat: <=3.91
• livewire/livewire: >2.2.4,<2.2.6
• lms/routes: <2.1.1
• localizationteam/l10nmgr: <7.4|>=8,<8.7|>=9,<9.2
• luyadev/yii-helpers: <1.2.1
• magento/community-edition: <=2.4
• magento/magento1ce: <1.9.4.3-dev
• magento/magento1ee: >=1,<1.14.4.3-dev
• magento/product-community-edition: >=2,<2.2.10|>=2.3,<2.3.2.0-patch2
• maikuolan/phpmussel: >=1,<1.6
• mantisbt/mantisbt: <=2.25.5
• marcwillmann/turn: <0.3.3
• matyhtf/framework: <3.0.6
• mautic/core: <4.3
• mediawiki/core: >=1.27,<1.27.6|>=1.29,<1.29.3|>=1.30,<1.30.2|>=1.31,<1.31.9|>=1.32,<1.32.6|>=1.32.99,<1.33.3|>=1.33.99,<1.34.3|>=1.34.99,<1.35
• mediawiki/matomo: <2.4.3
• melisplatform/melis-asset-manager: <5.0.1
• melisplatform/melis-cms: <5.0.1
• melisplatform/melis-front: <5.0.1
• mezzio/mezzio-swoole: <3.7|>=4,<4.3
• mgallegos/laravel-jqgrid: <=1.3
• microweber/microweber: <=1.3.4
• miniorange/miniorange-saml: <1.4.3
• mittwald/typo3_forum: <1.2.1
• mobiledetect/mobiledetectlib: <2.8.32
• modx/revolution: <=2.8.3.0-patch
• mojo42/jirafeau: <4.4
• mongodb/mongodb: >=1,<1.9.2
• monolog/monolog: >=1.8,<1.12
• moodle/moodle: <4.2.0.0-RC2-dev|==4.2
• movim/moxl: >=0.8,<=0.10
• mpdf/mpdf: <=7.1.7
• mustache/mustache: >=2,<2.14.1
• namshi/jose: <2.2
• neoan3-apps/template: <1.1.1
• neorazorx/facturascripts: <2022.04
• neos/flow: >=1,<1.0.4|>=1.1,<1.1.1|>=2,<2.0.1|>=2.3,<2.3.16|>=3,<3.0.12|>=3.1,<3.1.10|>=3.2,<3.2.13|>=3.3,<3.3.13|>=4,<4.0.6
• neos/form: >=1.2,<4.3.3|>=5,<5.0.9|>=5.1,<5.1.3
• neos/neos: >=1.1,<1.1.3|>=1.2,<1.2.13|>=2,<2.0.4|>=2.3,<2.9.99|>=3,<3.0.20|>=3.1,<3.1.18|>=3.2,<3.2.14|>=3.3,<5.3.10|>=7,<7.0.9|>=7.1,<7.1.7|>=7.2,<7.2.6|>=7.3,<7.3.4|>=8,<8.0.2
• neos/neos-ui: <=8.3.3
• neos/swiftmailer: >=4.1,<4.1.99|>=5.4,<5.4.5
• netgen/tagsbundle: >=3.4,<3.4.11|>=4,<4.0.15
• nette/application: >=2,<2.0.19|>=2.1,<2.1.13|>=2.2,<2.2.10|>=2.3,<2.3.14|>=2.4,<2.4.16|>=3,<3.0.6
• nette/nette: >=2,<2.0.19|>=2.1,<2.1.13
• nilsteampassnet/teampass: <3.0.10
• notrinos/notrinos-erp: <=0.7
• noumo/easyii: <=0.9
• nukeviet/nukeviet: <4.5.02
• nyholm/psr7: <1.6.1
• nystudio107/craft-seomatic: <3.4.12
• nzo/url-encryptor-bundle: >=4,<4.3.2|>=5,<5.0.1
• october/backend: <1.1.2
• october/cms: <=3.4.16
• october/october: <=3.4.4
• october/rain: <1.0.472|>=1.1,<1.1.2
• october/system: <1.0.476|>=1.1,<1.1.12|>=2,<2.2.34|>=3,<3.0.66
• onelogin/php-saml: <2.10.4
• oneup/uploader-bundle: <1.9.3|>=2,<2.1.5
• open-web-analytics/open-web-analytics: <1.7.4
• opencart/opencart: <=3.0.3.7|>=4,<4.0.2.3-dev
• openid/php-openid: <2.3
• openmage/magento-lts: <=19.5|>=20,<=20.1
• opensource-workshop/connect-cms: <1.7.2|>=2,<2.3.2
• orchid/platform: >=9,<9.4.4|>=14.0.0.0-alpha4,<14.5
• oro/commerce: >=4.1,<5.0.6
• oro/crm: >=1.7,<1.7.4|>=3.1,<4.1.17|>=4.2,<4.2.7
• oro/platform: >=1.7,<1.7.4|>=3.1,<3.1.29|>=4.1,<4.1.17|>=4.2,<4.2.8
• oxid-esales/oxideshop-ce: <4.5
• packbackbooks/lti-1-3-php-library: <5
• padraic/humbug_get_contents: <1.1.2
• pagarme/pagarme-php: <3
• pagekit/pagekit: <=1.0.18
• paragonie/random_compat: <2
• passbolt/passbolt_api: <2.11
• paypal/merchant-sdk-php: <3.12
• pear/archive_tar: <1.4.14
• pear/crypt_gpg: <1.6.7
• pear/pear: <=1.10.1
• pegasus/google-for-jobs: <1.5.1|>=2,<2.1.1
• personnummer/personnummer: <3.0.2
• phanan/koel: <5.1.4
• php-mod/curl: <2.3.2
• phpbb/phpbb: <3.2.10|>=3.3,<3.3.1
• phpfastcache/phpfastcache: <6.1.5|>=7,<7.1.2|>=8,<8.0.7
• phpmailer/phpmailer: <6.5
• phpmussel/phpmussel: >=1,<1.6
• phpmyadmin/phpmyadmin: <5.2.1
• phpmyfaq/phpmyfaq: <=3.1.7
• phpoffice/phpexcel: <1.8
• phpoffice/phpspreadsheet: <1.16
• phpseclib/phpseclib: <2.0.31|>=3,<3.0.19
• phpservermon/phpservermon: <3.6
• phpsysinfo/phpsysinfo: <3.2.5
• phpunit/phpunit: >=4.8.19,<4.8.28|>=5,<5.6.3
• phpwhois/phpwhois: <=4.2.5
• phpxmlrpc/extras: <0.6.1
• phpxmlrpc/phpxmlrpc: <4.9.2
• pi/pi: <=2.5
• pimcore/admin-ui-classic-bundle: <1.1.2
• pimcore/customer-management-framework-bundle: <3.4.2
• pimcore/data-hub: <1.2.4
• pimcore/demo: <10.3
• pimcore/perspective-editor: <1.5.1
• pimcore/pimcore: <10.6.8
• pixelfed/pixelfed: <=0.11.4
• pocketmine/bedrock-protocol: <8.0.2
• pocketmine/pocketmine-mp: <=4.23|>=5,<5.3.1
• pressbooks/pressbooks: <5.18
• prestashop/autoupgrade: >=4,<4.10.1
• prestashop/blockwishlist: >=2,<2.1.1
• prestashop/contactform: >=1.0.1,<4.3
• prestashop/gamification: <2.3.2
• prestashop/prestashop: <8.1.2
• prestashop/productcomments: <5.0.2
• prestashop/ps_emailsubscription: <2.6.1
• prestashop/ps_facetedsearch: <3.4.1
• prestashop/ps_linklist: <3.1
• privatebin/privatebin: <1.4
• processwire/processwire: <=3.0.200
• propel/propel: >=2.0.0.0-alpha1,<=2.0.0.0-alpha7
• propel/propel1: >=1,<=1.7.1
• pterodactyl/panel: <1.7
• ptheofan/yii2-statemachine: >=2
• ptrofimov/beanstalk_console: <1.7.14
• pusher/pusher-php-server: <2.2.1
• pwweb/laravel-core: <=0.3.6.0-beta
• pyrocms/pyrocms: <=3.9.1
• rainlab/debugbar-plugin: <3.1
• rainlab/user-plugin: <=1.4.5
• rankmath/seo-by-rank-math: <=1.0.95
• rap2hpoutre/laravel-log-viewer: <0.13
• react/http: >=0.7,<1.9
• really-simple-plugins/complianz-gdpr: <6.4.2
• remdex/livehelperchat: <3.99
• rmccue/requests: >=1.6,<1.8
• robrichards/xmlseclibs: <3.0.4
• roots/soil: <4.1
• rudloff/alltube: <3.0.3
• s-cart/core: <6.9
• s-cart/s-cart: <6.9
• sabberworm/php-css-parser: >=1,<1.0.1|>=2,<2.0.1|>=3,<3.0.1|>=4,<4.0.1|>=5,<5.0.9|>=5.1,<5.1.3|>=5.2,<5.2.1|>=6,<6.0.2|>=7,<7.0.4|>=8,<8.0.1|>=8.1,<8.1.1|>=8.2,<8.2.1|>=8.3,<8.3.1
• sabre/dav: <1.7.11|>=1.8,<1.8.9
• scheb/two-factor-bundle: <3.26|>=4,<4.11
• sensiolabs/connect: <4.2.3
• serluck/phpwhois: <=4.2.6
• sfroemken/url_redirect: <=1.2.1
• sheng/yiicms: <=1.2
• shopware/core: <=6.4.20
• shopware/platform: <=6.4.20
• shopware/production: <=6.3.5.2
• shopware/shopware: <=5.7.17
• shopware/storefront: <=6.4.8.1
• shopxo/shopxo: <2.2.6
• showdoc/showdoc: <2.10.4
• silverstripe-australia/advancedreports: >=1,<=2
• silverstripe/admin: <1.13.6
• silverstripe/assets: >=1,<1.11.1
• silverstripe/cms: <4.11.3
• silverstripe/comments: >=1.3,<1.9.99|>=2,<2.9.99|>=3,<3.1.1
• silverstripe/forum: <=0.6.1|>=0.7,<=0.7.3
• silverstripe/framework: <4.13.14|>=5,<5.0.13
• silverstripe/graphql: <3.5.2|>=4.0.0.0-alpha1,<4.0.0.0-alpha2|>=4.1.1,<4.1.2|>=4.2.2,<4.2.3
• silverstripe/hybridsessions: >=1,<2.4.1|>=2.5,<2.5.1
• silverstripe/recipe-cms: >=4.5,<4.5.3
• silverstripe/registry: >=2.1,<2.1.2|>=2.2,<2.2.1
• silverstripe/restfulserver: >=1,<1.0.9|>=2,<2.0.4
• silverstripe/silverstripe-omnipay: <2.5.2|>=3,<3.0.2|>=3.1,<3.1.4|>=3.2,<3.2.1
• silverstripe/subsites: >=2,<2.6.1
• silverstripe/taxonomy: >=1.3,<1.3.1|>=2,<2.0.1
• silverstripe/userforms: <3
• silverstripe/versioned-admin: >=1,<1.11.1
• simple-updates/phpwhois: <=1
• simplesamlphp/saml2: <1.15.4|>=2,<2.3.8|>=3,<3.1.4
• simplesamlphp/simplesamlphp: <1.18.6
• simplesamlphp/simplesamlphp-module-infocard: <1.0.1
• simplesamlphp/simplesamlphp-module-openid: <1
• simplesamlphp/simplesamlphp-module-openidprovider: <0.9
• simplito/elliptic-php: <1.0.6
• sitegeist/fluid-components: <3.5
• sjbr/sr-freecap: <2.4.6|>=2.5,<2.5.3
• slim/psr7: <1.4.1|>=1.5,<1.5.1|>=1.6,<1.6.1
• slim/slim: <2.6
• slub/slub-events: <3.0.3
• smarty/smarty: <3.1.48|>=4,<4.3.1
• snipe/snipe-it: <=6.0.14
• socalnick/scn-social-auth: <1.15.2
• socialiteproviders/steam: <1.1
• spatie/browsershot: <3.57.4
• spipu/html2pdf: <5.2.8
• spoon/library: <1.4.1
• spoonity/tcpdf: <6.2.22
• squizlabs/php_codesniffer: >=1,<2.8.1|>=3,<3.0.1
• ssddanbrown/bookstack: <22.02.3
• statamic/cms: <4.10
• stormpath/sdk: <9.9.99
• studio-42/elfinder: <2.1.62
• subhh/libconnect: <7.0.8|>=8,<8.1
• sukohi/surpass: <1
• sulu/sulu: <1.6.44|>=2,<2.2.18|>=2.3,<2.3.8|==2.4.0.0-RC1|>=2.5,<2.5.10
• sumocoders/framework-user-bundle: <1.4
• swag/paypal: <5.4.4
• swiftmailer/swiftmailer: >=4,<5.4.5
• sylius/admin-bundle: >=1,<1.0.17|>=1.1,<1.1.9|>=1.2,<1.2.2
• sylius/grid: >=1,<1.1.19|>=1.2,<1.2.18|>=1.3,<1.3.13|>=1.4,<1.4.5|>=1.5,<1.5.1
• sylius/grid-bundle: <1.10.1
• sylius/paypal-plugin: >=1,<1.2.4|>=1.3,<1.3.1
• sylius/resource-bundle: <1.3.14|>=1.4,<1.4.7|>=1.5,<1.5.2|>=1.6,<1.6.4
• sylius/sylius: <1.9.10|>=1.10,<1.10.11|>=1.11,<1.11.2
• symbiote/silverstripe-multivaluefield: >=3,<3.0.99
• symbiote/silverstripe-queuedjobs: >=3,<3.0.2|>=3.1,<3.1.4|>=4,<4.0.7|>=4.1,<4.1.2|>=4.2,<4.2.4|>=4.3,<4.3.3|>=4.4,<4.4.3|>=4.5,<4.5.1|>=4.6,<4.6.4
• symbiote/silverstripe-seed: <6.0.3
• symbiote/silverstripe-versionedfiles: <=2.0.3
• symfont/process: >=0
• symfony/cache: >=3.1,<3.4.35|>=4,<4.2.12|>=4.3,<4.3.8
• symfony/dependency-injection: >=2,<2.0.17|>=2.7,<2.7.51|>=2.8,<2.8.50|>=3,<3.4.26|>=4,<4.1.12|>=4.2,<4.2.7
• symfony/error-handler: >=4.4,<4.4.4|>=5,<5.0.4
• symfony/form: >=2.3,<2.3.35|>=2.4,<2.6.12|>=2.7,<2.7.50|>=2.8,<2.8.49|>=3,<3.4.20|>=4,<4.0.15|>=4.1,<4.1.9|>=4.2,<4.2.1
• symfony/framework-bundle: >=2,<2.3.18|>=2.4,<2.4.8|>=2.5,<2.5.2|>=2.7,<2.7.51|>=2.8,<2.8.50|>=3,<3.4.26|>=4,<4.1.12|>=4.2,<4.2.7|>=5.3.14,<=5.3.14|>=5.4.3,<=5.4.3|>=6.0.3,<=6.0.3
• symfony/http-foundation: >=2,<2.8.52|>=3,<3.4.35|>=4,<4.2.12|>=4.3,<4.3.8|>=4.4,<4.4.7|>=5,<5.0.7
• symfony/http-kernel: >=2,<4.4.50|>=5,<5.4.20|>=6,<6.0.20|>=6.1,<6.1.12|>=6.2,<6.2.6
• symfony/intl: >=2.7,<2.7.38|>=2.8,<2.8.31|>=3,<3.2.14|>=3.3,<3.3.13
• symfony/maker-bundle: >=1.27,<1.29.2|>=1.30,<1.31.1
• symfony/mime: >=4.3,<4.3.8
• symfony/phpunit-bridge: >=2.8,<2.8.50|>=3,<3.4.26|>=4,<4.1.12|>=4.2,<4.2.7
• symfony/polyfill: >=1,<1.10
• symfony/polyfill-php55: >=1,<1.10
• symfony/proxy-manager-bridge: >=2.7,<2.7.51|>=2.8,<2.8.50|>=3,<3.4.26|>=4,<4.1.12|>=4.2,<4.2.7
• symfony/routing: >=2,<2.0.19
• symfony/security: >=2,<2.7.51|>=2.8,<3.4.49|>=4,<4.4.24|>=5,<5.2.8
• symfony/security-bundle: >=2,<4.4.50|>=5,<5.4.20|>=6,<6.0.20|>=6.1,<6.1.12|>=6.2,<6.2.6
• symfony/security-core: >=2.4,<2.6.13|>=2.7,<2.7.9|>=2.7.30,<2.7.32|>=2.8,<3.4.49|>=4,<4.4.24|>=5,<5.2.9
• symfony/security-csrf: >=2.4,<2.7.48|>=2.8,<2.8.41|>=3,<3.3.17|>=3.4,<3.4.11|>=4,<4.0.11
• symfony/security-guard: >=2.8,<3.4.48|>=4,<4.4.23|>=5,<5.2.8
• symfony/security-http: >=2.3,<2.3.41|>=2.4,<2.7.51|>=2.8,<2.8.50|>=3,<3.4.26|>=4,<4.2.12|>=4.3,<4.3.8|>=4.4,<4.4.7|>=5,<5.0.7|>=5.1,<5.2.8|>=5.3,<5.3.2
• symfony/serializer: >=2,<2.0.11|>=4.1,<4.4.35|>=5,<5.3.12
• symfony/symfony: <4.4.50|>=5,<5.4.20|>=6,<6.0.20|>=6.1,<6.1.12|>=6.2,<6.2.6
• symfony/translation: >=2,<2.0.17
• symfony/ux-autocomplete: <2.11.2
• symfony/validator: >=2,<2.0.24|>=2.1,<2.1.12|>=2.2,<2.2.5|>=2.3,<2.3.3
• symfony/var-exporter: >=4.2,<4.2.12|>=4.3,<4.3.8
• symfony/web-profiler-bundle: >=2,<2.3.19|>=2.4,<2.4.9|>=2.5,<2.5.4
• symfony/yaml: >=2,<2.0.22|>=2.1,<2.1.7
• t3/dce: <0.11.5|>=2.2,<2.6.2
• t3g/svg-sanitizer: <1.0.3
• tastyigniter/tastyigniter: <3.3
• tcg/voyager: <=1.4
• tecnickcom/tcpdf: <6.2.22
• terminal42/contao-tablelookupwizard: <3.3.5
• thelia/backoffice-default-template: >=2.1,<2.1.2
• thelia/thelia: >=2.1,<2.1.3
• theonedemon/phpwhois: <=4.2.5
• thinkcmf/thinkcmf: <=5.1.7
• thorsten/phpmyfaq: <3.2.0.0-beta2
• tikiwiki/tiki-manager: <=17.1
• tinymce/tinymce: <5.10.7|>=6,<6.3.1
• tinymighty/wiki-seo: <1.2.2
• titon/framework: <9.9.99
• tobiasbg/tablepress: <=2.0.0.0-RC1
• topthink/framework: <6.0.14
• topthink/think: <=6.1.1
• topthink/thinkphp: <=3.2.3
• tpwd/ke_search: <4.0.3|>=4.1,<4.6.6|>=5,<5.0.2
• tribalsystems/zenario: <=9.3.57595
• truckersmp/phpwhois: <=4.3.1
• ttskch/pagination-service-provider: <1
• twig/twig: <1.44.7|>=2,<2.15.3|>=3,<3.4.3
• typo3/cms: <9.5.29|>=10,<10.4.35|>=11,<11.5.23|>=12,<12.2
• typo3/cms-backend: >=7,<=7.6.50|>=8,<=8.7.39|>=9,<=9.5.24|>=10,<=10.4.13|>=11,<=11.1
• typo3/cms-core: <8.7.51|>=9,<9.5.42|>=10,<10.4.39|>=11,<11.5.30|>=12,<12.4.4
• typo3/cms-extbase: <6.2.24|>=7,<7.6.8|==8.1.1
• typo3/cms-form: >=8,<=8.7.39|>=9,<=9.5.24|>=10,<=10.4.13|>=11,<=11.1
• typo3/cms-rte-ckeditor: >=9.5,<9.5.42|>=10,<10.4.39|>=11,<11.5.30
• typo3/flow: >=1,<1.0.4|>=1.1,<1.1.1|>=2,<2.0.1|>=2.3,<2.3.16|>=3,<3.0.12|>=3.1,<3.1.10|>=3.2,<3.2.13|>=3.3,<3.3.13|>=4,<4.0.6
• typo3/html-sanitizer: >=1,<1.5.1|>=2,<2.1.2
• typo3/neos: >=1.1,<1.1.3|>=1.2,<1.2.13|>=2,<2.0.4|>=2.3,<2.3.99|>=3,<3.0.20|>=3.1,<3.1.18|>=3.2,<3.2.14|>=3.3,<3.3.23|>=4,<4.0.17|>=4.1,<4.1.16|>=4.2,<4.2.12|>=4.3,<4.3.3
• typo3/phar-stream-wrapper: >=1,<2.1.1|>=3,<3.1.1
• typo3/swiftmailer: >=4.1,<4.1.99|>=5.4,<5.4.5
• typo3fluid/fluid: >=2,<2.0.8|>=2.1,<2.1.7|>=2.2,<2.2.4|>=2.3,<2.3.7|>=2.4,<2.4.4|>=2.5,<2.5.11|>=2.6,<2.6.10
• ua-parser/uap-php: <3.8
• uasoft-indonesia/badaso: <=2.9.7
• unisharp/laravel-filemanager: <=2.5.1
• userfrosting/userfrosting: >=0.3.1,<4.6.3
• usmanhalalit/pixie: <1.0.3|>=2,<2.0.2
• uvdesk/community-skeleton: <=1.1.1
• vanilla/safecurl: <0.9.2
• verot/class.upload.php: <=1.0.3|>=2,<=2.0.4
• vova07/yii2-fileapi-widget: <0.1.9
• vrana/adminer: <4.8.1
• waldhacker/hcaptcha: <2.1.2
• wallabag/tcpdf: <6.2.22
• wallabag/wallabag: <=2.6.2
• wanglelecc/laracms: <=1.0.3
• web-auth/webauthn-framework: >=3.3,<3.3.4
• webbuilders-group/silverstripe-kapost-bridge: <0.4
• webcoast/deferred-image-processing: <1.0.2
• webklex/laravel-imap: <5.3
• webklex/php-imap: <5.3
• webpa/webpa: <3.1.2
• wikibase/wikibase: <=1.39.3
• wikimedia/parsoid: <0.12.2
• willdurand/js-translation-bundle: <2.1.1
• wintercms/winter: <1.2.3
• woocommerce/woocommerce: <6.6
• wp-cli/wp-cli: <2.5
• wp-graphql/wp-graphql: <=1.14.5
• wpanel/wpanel4-cms: <=4.3.1
• wpcloud/wp-stateless: <3.2
• wwbn/avideo: <=12.4
• xataface/xataface: <3
• xpressengine/xpressengine: <3.0.15
• yeswiki/yeswiki: <4.1
• yetiforce/yetiforce-crm: <=6.4
• yidashi/yii2cmf: <=2
• yii2mod/yii2-cms: <1.9.2
• yiisoft/yii: <1.1.27
• yiisoft/yii2: <2.0.38
• yiisoft/yii2-bootstrap: <2.0.4
• yiisoft/yii2-dev: <2.0.43
• yiisoft/yii2-elasticsearch: <2.0.5
• yiisoft/yii2-gii: <=2.2.4
• yiisoft/yii2-jui: <2.0.4
• yiisoft/yii2-redis: <2.0.8
• yikesinc/yikes-inc-easy-mailchimp-extender: <6.8.6
• yoast-seo-for-typo3/yoast_seo: <7.2.3
• yourls/yourls: <=1.8.2
• zencart/zencart: <=1.5.7.0-beta
• zendesk/zendesk_api_client_php: <2.2.11
• zendframework/zend-cache: >=2.4,<2.4.8|>=2.5,<2.5.3
• zendframework/zend-captcha: >=2,<2.4.9|>=2.5,<2.5.2
• zendframework/zend-crypt: >=2,<2.4.9|>=2.5,<2.5.2
• zendframework/zend-db: >=2,<2.0.99|>=2.1,<2.1.99|>=2.2,<2.2.10|>=2.3,<2.3.5
• zendframework/zend-developer-tools: >=1.2.2,<1.2.3
• zendframework/zend-diactoros: <1.8.4
• zendframework/zend-feed: <2.10.3
• zendframework/zend-form: >=2,<2.2.7|>=2.3,<2.3.1
• zendframework/zend-http: <2.8.1
• zendframework/zend-json: >=2.1,<2.1.6|>=2.2,<2.2.6
• zendframework/zend-ldap: >=2,<2.0.99|>=2.1,<2.1.99|>=2.2,<2.2.8|>=2.3,<2.3.3
• zendframework/zend-mail: >=2,<2.4.11|>=2.5,<2.7.2
• zendframework/zend-navigation: >=2,<2.2.7|>=2.3,<2.3.1
• zendframework/zend-session: >=2,<2.0.99|>=2.1,<2.1.99|>=2.2,<2.2.9|>=2.3,<2.3.4
• zendframework/zend-validator: >=2.3,<2.3.6
• zendframework/zend-view: >=2,<2.2.7|>=2.3,<2.3.1
• zendframework/zend-xmlrpc: >=2.1,<2.1.6|>=2.2,<2.2.6
• zendframework/zendframework: <=3
• zendframework/zendframework1: <1.12.20
• zendframework/zendopenid: <2.0.2
• zendframework/zendrest: <2.0.2
• zendframework/zendservice-amazon: <2.0.3
• zendframework/zendservice-api: <1
• zendframework/zendservice-audioscrobbler: <2.0.2
• zendframework/zendservice-nirvanix: <2.0.2
• zendframework/zendservice-slideshare: <2.0.2
• zendframework/zendservice-technorati: <2.0.2
• zendframework/zendservice-windowsazure: <2.0.2
• zendframework/zendxml: <1.0.1
• zenstruck/collection: <0.2.1
• zetacomponents/mail: <1.8.2
• zf-commons/zfc-user: <1.2.2
• zfcampus/zf-apigility-doctrine: >=1,<1.0.3
• zfr/zfr-oauth2-server-module: <0.1.2
• zoujingli/thinkadmin: <6.0.22

MIT

• Marco Pivetta
• Ilya Tribusean

• dev

README

A message to Russian 🇷🇺 people

If you currently live in Russia, please read this message.

Purpose

This package ensures that your application doesn't have installed dependencies with known security vulnerabilities.

Installation

composer require --dev roave/security-advisories:dev-latest

Usage

This package does not provide any API or usable classes: its only purpose is to prevent installation of software with known and documented security issues. Simply add "roave/security-advisories": "dev-latest" to your composer.json "require-dev" section and you will not be able to harm yourself with software with known security vulnerabilities.

For example, try following:

composer require --dev roave/security-advisories:dev-latest
# following commands will fail:
composer require symfony/symfony:2.5.2
composer require zendframework/zendframework:2.3.1 

The checks are only executed when adding a new dependency via composer require or when running composer update: deploying an application with a valid composer.lock and via composer install won't trigger any security versions checking.

You can manually trigger a version check by using the --dry-run switch on an update while not doing anything. Running composer update --dry-run roave/security-advisories is an effective way to manually trigger a security version check.

roave/security-advisories for enterprise

Available as part of the Tidelift Subscription.

The maintainers of roave/security-advisories and thousands of other packages are working with Tidelift to deliver commercial support and maintenance for the open source dependencies you use to build your applications. Save time, reduce risk, and improve code health, while paying the maintainers of the exact dependencies you use. Learn more.

You can also contact us at [e-mail] for looking into security issues in your own project.

Stability

This package can only be required in its dev-latest version: there will never be stable/tagged versions because of the nature of the problem being targeted. Security issues are in fact a moving target, and locking your project to a specific tagged version of the package would not make any sense.

This package is therefore only suited for installation in the root of your deployable project.

Sources

This package extracts information about existing security issues in various composer projects from the FriendsOfPHP/security-advisories repository and the GitHub Advisory Database.