HIGH7.5
GHSA-5p73-qg2v-383h
LTI 1.3 Tool Library's Nonce Claim Value not validated against nonce value sent in Authentication Request before v5.0
Quick fix
GHSA-5p73-qg2v-383h — packbackbooks/lti-1-3-php-library: upgrade to the fixed version with the command below.
composer require packbackbooks/lti-1-3-php-library:^5.0Details
### Impact
Nonce Claim Value was not being validated against the nonce value sent in the Authentication Request.
### Patches
Users should upgrade to version 5.0 immediately
### Workarounds
None.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/packbackbooks/lti-1-3-php-library
Introduced in:
0Fixed in: 5.0Fix
composer require packbackbooks/lti-1-3-php-library:^5.0