Skip to content

Bump nategood/httpful to ^1.0#2

Merged
TomasVotruba merged 2 commits intorectorphp:mainfrom
samsonasik:bump-nategood-httpful
Sep 18, 2024
Merged

Bump nategood/httpful to ^1.0#2
TomasVotruba merged 2 commits intorectorphp:mainfrom
samsonasik:bump-nategood-httpful

Conversation

@samsonasik
Copy link
Copy Markdown
Member

Fix security advisory reported on usage in rector-src:

➜  rector-src git:(main) ✗ composer audit
Found 1 security vulnerability advisory affecting 1 package:
+-------------------+----------------------------------------------------------------------------------+
| Package           | nategood/httpful                                                                 |
| Severity          | medium                                                                           |
| CVE               | NO CVE                                                                           |
| Title             | Insecure HTTPS Connections due to Missing Default Certificate Validation         |
| URL               | https://huntr.com/bounties/8d59c089-92f1-4b73-90f8-54968a70e2fb                  |
| Affected versions | <0.2.0|>=0.2.0,<0.3.0|>=0.3.0,<1.0.0                                             |
| Reported at       | 2024-05-01T00:00:00+00:00                                                        |
| Advisory ID       | PKSA-4dtf-ym9h-t41j                                                              |
+-------------------+----------------------------------------------------------------------------------+
➜  rector-src git:(main) ✗ composer why nategood/httpful
rector/release-notes-generator 0.2.0 requires nategood/httpful (^0.3.2) 

@samsonasik
Copy link
Copy Markdown
Member Author

Ready to merge 👍

@TomasVotruba TomasVotruba merged commit 02df1b4 into rectorphp:main Sep 18, 2024
@TomasVotruba
Copy link
Copy Markdown
Member

Thank you

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants