Packagist / PACKAGE INTELLIGENCE

mos/cimage

Get the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.

Check the version you ship.

Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.

Advisories & recorded fixes

medium6.1

GHSA-6hv3-9fqx-8pg5Fix available

CImage Cross-site Scripting vulnerability

Packagist / mos/cimage

29 Jan 2023

mos/cimage Packagist

Affected range	Recorded fix
Earlier releases before 0.7.19Ecosystem versions	0.7.19

Version evidence: OSV · GHSA-6hv3-9fqx-8pg5

View original version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "0"
        },
        {
          "fixed": "0.7.19"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "v0.7.1",
    "v0.7.10",
    "v0.7.11",
    "v0.7.12",
    "v0.7.13",
    "v0.7.14",
    "v0.7.15",
    "v0.7.16",
    "v0.7.17",
    "v0.7.18",
    "v0.7.2",
    "v0.7.3",
    "v0.7.4",
    "v0.7.5",
    "v0.7.6",
    "v0.7.7",
    "v0.7.8",
    "v0.7.9"
  ]
}