Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/silverstripe/framework@4.2.0-rc1
purl pkg:composer/silverstripe/framework@4.2.0-rc1
Tags Ghost
Next non-vulnerable version 6.2.2
Latest non-vulnerable version 6.2.2
Risk score 4.0
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-cwgq-83w5-8jfq

silverstripe/framework has possible denial of service attack vector when flushing A possible denial of service attack vector has been identified …
4.2.2
Vulnerable
GHSA-m2hh-2m46-x6j5

silverstripe/framework may disclose database credentials during connection failure When running SilverStripe 3.7 or 4.x in dev mode with the mysqli …
4.2.2
Vulnerable
GHSA-265q-222x-52m6

silverstripe/framework has potential SQL Injection vulnerability in PostgreSQL database connector A potential SQL injection vulnerability was identified by using the …
4.2.3
Vulnerable
This package is not known to fix any advisories.