HIGH
GHSA-3988-h75v-hwf6
Arbitrary shell execution
Quick fix
GHSA-3988-h75v-hwf6 — squizlabs/php_codesniffer: upgrade to the fixed version with the command below.
composer require squizlabs/php_codesniffer:^3.0.1Details
A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/squizlabs/php_codesniffer
Introduced in:
3.0.0Fixed in: 3.0.1Fix
composer require squizlabs/php_codesniffer:^3.0.1