Skip to content

[GHSA-hm7p-r324-hhf3] phpseclib Infinite Loop vulnerability - #1752

Merged
advisory-database[bot] merged 1 commit into
janedbal/advisory-improvement-1752from
janedbal-GHSA-hm7p-r324-hhf3
Mar 6, 2023
Merged

[GHSA-hm7p-r324-hhf3] phpseclib Infinite Loop vulnerability#1752
advisory-database[bot] merged 1 commit into
janedbal/advisory-improvement-1752from
janedbal-GHSA-hm7p-r324-hhf3

Conversation

@janedbal

@janedbal janedbal commented Mar 6, 2023

Copy link
Copy Markdown

Updates

  • Affected products
  • Description

Comments
v2 is not affected, see author statement phpseclib/phpseclib@6298d1c#commitcomment-103226722

@github-actions
github-actions Bot changed the base branch from main to janedbal/advisory-improvement-1752 March 6, 2023 12:06
@ronwoch

ronwoch commented Mar 6, 2023

Copy link
Copy Markdown

HI @janedbal, thank you for bringing this issue to our attention! I will update our GHSA to reflect the correct version ranges, but as MITRE was the issuing CNA for this CVE, they will have to be contacted directly to get the information in the CVE itself updated.

Tagging @terrafrost, as they will likely wish to fill out the contact form with MITRE to correct the information.

This PR will close automatically when I make the updates to the GHSA, but the comments will remain open if there is anything else.

Thanks!

@advisory-database
advisory-database Bot merged this pull request into janedbal/advisory-improvement-1752 Mar 6, 2023
@advisory-database
advisory-database Bot deleted the janedbal-GHSA-hm7p-r324-hhf3 branch March 6, 2023 21:20
@advisory-database

Copy link
Copy Markdown
Contributor

Hi @janedbal! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!

@terrafrost

Copy link
Copy Markdown

The CVE has been updated.

Thanks all!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants