Alex/freescout
1
0
Fork 0
mirror of https://github.com/freescout-helpdesk/freescout.git synced 2024-09-19 18:21:31 +02:00
Code Issues Releases Wiki Activity

Updated FreeScout Dependencies Security (markdown)

FreeScout 2023-09-23 14:23:51 +03:00
parent fc3f35ef98
commit fdf210ac8f
1 changed files with 15 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
FreeScout-Dependencies-Security.md

@ -4,10 +4,23 @@ You can read how FreeScout Team ensures dependencies security [here](https://git
Below is the list of known security issues in dependencies along with the information on patches fixing them in FreeScout.
***
## laravel/framework
```
RCE vulnerability in "cookie" session driver
https://blog.laravel.com/laravel-cookie-security-releases
```
Fix: [822fb85](https://github.com/freescout-helpdesk/freescout/commit/822fb85f1c534131a02274971a19dd50a2109c8b)
Fix: [822fb85](https://github.com/freescout-helpdesk/freescout/commit/822fb85f1c534131a02274971a19dd50a2109c8b)
***
```
CVE-2021-43808: Possible cross-site scripting (XSS) vulnerability in the Blade templating engine
https://github.com/laravel/framework/security/advisories/GHSA-66hf-2p6w-jqfw
```
Fix: [1e871813](https://github.com/freescout-helpdesk/freescout/commit/1e871813)
***