Search for packages
Package details: pkg:composer/mediawiki/core@1.39.3
purl pkg:composer/mediawiki/core@1.39.3
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-ezum-tdjw-mbap X-Forwarded-For header allows brute-forcing autoblocked IP addresses An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header. CVE-2023-29141
GHSA-5vj8-g3qg-4qh6

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-01T12:15:20.597578+00:00 GithubOSV Importer Fixing VCID-ezum-tdjw-mbap https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/03/GHSA-5vj8-g3qg-4qh6/GHSA-5vj8-g3qg-4qh6.json 36.1.3