HIGH8.8
GHSA-86rf-38v8-9c4x
privilege chaining in cockpit-hq/cockpit
Quick fix
GHSA-86rf-38v8-9c4x — cockpit-hq/cockpit: upgrade to the fixed version with the command below.
composer require cockpit-hq/cockpit:^2.3.8Details
Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/cockpit-hq/cockpit
Introduced in:
0Fixed in: 2.3.8Fix
composer require cockpit-hq/cockpit:^2.3.8