Merge pull request #718 from xabbuh/timber

add CVE-2024-29800 for timber/timber
FriendsOfPHP · Apr 18, 2024 · 109ea42 · 109ea42
2 parents 0495186 + ff3feb4
commit 109ea42
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/timber/timber/CVE-2024-29800.yaml b/timber/timber/CVE-2024-29800.yaml
@@ -0,0 +1,14 @@
+title: Deserialization of Untrusted Data in timber/timber
+link: https://github.com/timber/timber/security/advisories/GHSA-6363-v5m4-fvq3
+cve: CVE-2024-29800
+branches:
+    1.23.x:
+        time: 2024-04-10 16:25:00
+        versions: ['>=0.16.6', '<1.23.1']
+    1.24.x:
+        time: 2024-04-10 16:24:00
+        versions: ['>=1.24.0', '<1.24.1']
+    2.x:
+        time: 2024-04-10 16:50:00
+        versions: ['>=2.0.0', '<2.1.0']
+reference: composer://timber/timber