Search for packages
| purl | pkg:composer/amphp/artax@2.0.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-3c1n-du49-6bes
Aliases: CVE-2016-5385 GHSA-m6ch-gg5f-wxx3 |
Affected by 0 other vulnerabilities. |
|
|
VCID-5gzu-cums-1qh1
Aliases: GHSA-gm98-g2wf-7c68 |
amphp/artax Cookie leakage to wrong origins and non-restricted cookie acceptance In artax version before 1.0.6 and 2 before 2.0.6, cookies of `foo.bar.example.com` were leaked to `foo.bar`. Additionally, any site could set cookies for any other site. Artax fixed this issue by following newer browser implementations now. Cookies can only be set on domains higher or equal to the current domain, but not on any public suffixes. |
Affected by 0 other vulnerabilities. |
|
VCID-sxpe-npu5-9yd6
Aliases: 2017-05-09 |
Cookie leakage to wrong origins and non-restricted cookie acceptance |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-07-01T18:15:54.068773+00:00 | GitLab Importer | Affected by | VCID-5gzu-cums-1qh1 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/amphp/artax/GHSA-gm98-g2wf-7c68.yml | 36.1.3 |
| 2025-07-01T18:10:24.591425+00:00 | GitLab Importer | Affected by | VCID-sxpe-npu5-9yd6 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/amphp/artax/2017-05-09.yml | 36.1.3 |
| 2025-07-01T18:10:14.400250+00:00 | GitLab Importer | Affected by | VCID-3c1n-du49-6bes | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/amphp/artax/CVE-2016-5385.yml | 36.1.3 |
| 2025-07-01T14:34:51.054496+00:00 | GHSA Importer | Affected by | VCID-5gzu-cums-1qh1 | https://github.com/advisories/GHSA-gm98-g2wf-7c68 | 36.1.3 |
| 2025-07-01T14:31:35.536730+00:00 | GHSA Importer | Affected by | VCID-3c1n-du49-6bes | https://github.com/advisories/GHSA-m6ch-gg5f-wxx3 | 36.1.3 |