Search for packages
Package details: pkg:composer/mediawiki/core@1.40.0
purl pkg:composer/mediawiki/core@1.40.0
Next non-vulnerable version 1.40.1
Latest non-vulnerable version 1.40.1
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-rxjs-5p57-wbh1
Aliases:
CVE-2023-45363
GHSA-w5fx-cx7f-6vr9
MediaWiki Denial of Service vulnerability An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It allows attackers to cause a denial of service (unbounded loop and RequestTimeoutException) when querying pages redirected to other variants with redirects and converttitles set.
1.40.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-01T12:13:42.200269+00:00 GithubOSV Importer Affected by VCID-rxjs-5p57-wbh1 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/10/GHSA-w5fx-cx7f-6vr9/GHSA-w5fx-cx7f-6vr9.json 36.1.3