HIGH8.8
GHSA-ppm5-jv84-2xg2
Aimeos HTML client may potentially reveal sensitive information in error log
Quick fix
GHSA-ppm5-jv84-2xg2 — aimeos/ai-client-html: upgrade to the fixed version with the command below.
composer require aimeos/ai-client-html:^2024.04.7Details
### Impact Debug information can reveal sensitive information from environment variables in error log
### Affected platform Laravel environments with multi-vendor setups and admin access for the vendors
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/aimeos/ai-client-html
Introduced in:
2024.04.1Fixed in: 2024.04.7Fix
composer require aimeos/ai-client-html:^2024.04.7Packagist/aimeos/ai-client-html
Introduced in:
2023.04.1Fixed in: 2023.10.15Fix
composer require aimeos/ai-client-html:^2023.10.15Packagist/aimeos/ai-client-html
Introduced in:
2022.04.1Fixed in: 2022.10.13Fix
composer require aimeos/ai-client-html:^2022.10.13Packagist/aimeos/ai-client-html
Introduced in:
2021.10.1Fixed in: 2021.10.22Fix
composer require aimeos/ai-client-html:^2021.10.22