GHSA-65qg-f77j-cccfmedium6.1
Yii2-StateMachine extension for Yii2 XSS Vulnerability
The advisory, in context
The Yii2-StateMachine extension v2.x.x for Yii2 has XSS.
Affected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
ptheofan/yii2-statemachine Packagist
Ecosystem versions
From 2.0.0-RC1 through 2.0.0 (inclusive)
No fix recorded for this interval.
2 explicitly affected versions
v2.0.0, v2.0.0-RC1
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "2.0.0-RC1"
},
{
"last_affected": "2.0.0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"v2.0.0",
"v2.0.0-RC1"
]
}