Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/cartalyst/sentry@2.0.0-RC1
purl pkg:composer/cartalyst/sentry@2.0.0-RC1
Next non-vulnerable version 2.1.7
Latest non-vulnerable version 2.1.7
Risk score 4.0
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GMS-2016-129

Weak Password Recovery Mechanism for Forgotten Password Null reset codes are allowed through sentry.
2.1.7
Not vulnerable
GMS-2016-65

Arbitrary password resets via NULL reset codes There's a flaw in the DB schema where `reset_password_code` is NULL by default. … There are no reported fixed by versions.
GHSA-2m5g-8xpw-42vp

OpenCFP Framework (Sentry) Account takeover via null password reset codes OpenCFP, an open-source conference talk submission system written in PHP, …
2.1.7
Not vulnerable
This package is not known to fix any advisories.