MEDIUM5.3

GHSA-xh9g-cp3v-p8q4

Missing Authorization in Crater Invoice

Quick fix

GHSA-xh9g-cp3v-p8q4 — bytefury/crater: upgrade to the fixed version with the command below.

composer require bytefury/crater:^6.0.2

Details

Crater Invoice prior to version 6.0.2 has a missing authorization vulnerability..

Enter the version of the package you're using.

Introduced in: 0Fixed in: 6.0.2

Fixcomposer require bytefury/crater:^6.0.2