Packagist (Composer) package

bytefury/crater

pkg:composer/bytefury/crater

Vulnerabilities (4)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2022-0372	Med	5.4	< 6.0.0	6.0.0	Jan 27, 2022	Cross-site Scripting (XSS) - Stored in Packagist bytefury/crater prior to 6.0.2.
CVE-2022-0203	Med	5.3	< 6.0.2	6.0.2	Jan 26, 2022	Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2.
CVE-2022-0242	Hig	7.2	< 6.0	6.0	Jan 17, 2022	Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.
CVE-2021-4080	Hig	8.8	< 6.0.0	6.0.0	Jan 12, 2022	crater is vulnerable to Unrestricted Upload of File with Dangerous Type

CVE-2022-0372MedJan 27, 2022
affected < 6.0.0fixed 6.0.0
Cross-site Scripting (XSS) - Stored in Packagist bytefury/crater prior to 6.0.2.
CVE-2022-0203MedJan 26, 2022
affected < 6.0.2fixed 6.0.2
Improper Access Control in GitHub repository crater-invoice/crater prior to 6.0.2.
CVE-2022-0242HigJan 17, 2022
affected < 6.0fixed 6.0
Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.
CVE-2021-4080HigJan 12, 2022
affected < 6.0.0fixed 6.0.0
crater is vulnerable to Unrestricted Upload of File with Dangerous Type