Search for packages
Package details: pkg:composer/mediawiki/core@1.35.12
purl pkg:composer/mediawiki/core@1.35.12
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-rxjs-5p57-wbh1 MediaWiki Denial of Service vulnerability An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of service (unbounded loop and RequestTimeoutException) when querying pages redirected to other variants with redirects and converttitles set. CVE-2023-45363
GHSA-w5fx-cx7f-6vr9

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-01T12:13:42.151253+00:00 GithubOSV Importer Fixing VCID-rxjs-5p57-wbh1 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/10/GHSA-w5fx-cx7f-6vr9/GHSA-w5fx-cx7f-6vr9.json 36.1.3