FriendsOfPHP / security-advisories

A database of PHP security advisories

https://github.com/fabpot/local-php-security-checker

FriendsOfPHP/security-advisories Issues

Missing 2 phpseclib/phpseclib vulnerabilities (CVE-2024-27354, CVE-2024-27355)
Closed 6 months ago
Import advisories from the Github security vulnerability database automatically
Closed 2 years ago10
Missing api-platform CVE
Closed 2 years ago1
Support for Composer 1 is deprecated and some packages will not be available.
Closed 2 years ago5
PHP Deprecated: Return type of Composer\Repository\ArrayRepository::count() should either be compatible with Countable::count()
Closed 2 years ago2
[Discussion] Adopt OSV unified vulnerability schema for open source
Updated 3 years ago1
Typosquatting Malware symfont/process
Closed 3 years ago3
Work with Github to fix their Advisory Database importer?
Closed 4 years ago3
Using exact version constraint without boundaries are faling the validation
Closed 4 years ago5
Consider Adopting Package URL
Closed 4 years ago3
Consider adding a vulnerability id for non CVEs
Closed 4 years ago2
Laravel 5.8 marked as insecure when it's not in fact vulnerable to CVE-2021-3129
Closed 4 years ago4
facade/ignition seems to be fixed in 2.4.2
Closed 4 years ago3
Add level of severity for PHP Security Advisories
Closed 4 years ago3
propel: 2.0.0-alpha11
Closed 4 years ago11
Flag unsupported versions
Closed 4 years ago1
Mr
Closed 4 years ago
Would it be possible to add TYPO3 Extensions as well?
Closed 5 years ago8
alterphp/easyadmin-extension-bundle/2018-10-02.yaml
Closed 5 years ago2
simplesamlphp v1.17.8 reported as insecure
Closed 5 years ago2
Advisories didn't pushed
Closed 5 years ago
Wordpress advisories
Closed 5 years ago2
TYPO3 extension advisories
Closed 5 years ago4
March 2019 magento security releases
Closed 6 years ago
Drupal security release
Closed 6 years ago1
(XSS) vulnerability in Silex before 2.0.0
Closed 6 years ago1
Multiple SQL injection vulnerabilities in the Doctrine\DBAL
Closed 6 years ago1
An error occurred: Could not resolve host: security.sensiolabs.org.
Closed 6 years ago1
Advisories for Drupal contrib
Closed 6 years ago11
False positive on drupal/search_api_solr
Closed 6 years ago15
Is there a way to restrict installing abandon libraries because of security issue?
Closed 6 years ago3
Getting wrong warning - Drupal core 8.5.10
Closed 6 years ago2
Issue with security info for root package ezsystems/ezplatform
Closed 6 years ago12
SilverStripe security advisories should come from the official RSS feed
Closed 6 years ago4
Document usage limits for security.sensiolabs.org
Closed 6 years ago9
Update SwiftMailer v6 reference
Closed 6 years ago5
Timezone of time entries?
Closed 6 years ago2
[VULN] FOSUserBundle change host location
Closed 7 years ago2
A few of our of composer lock files do not show advisory warnings using the Client but work using Curl
Closed 7 years ago1
random_compat 1.x not insecure if on patched PHP version?
Closed 7 years ago3
Support severity ranking in the YAML?
Closed 7 years ago3
Report security-affected php versions?
Closed 7 years ago10
Implement auto-merging of advisories by a bot
Closed 7 years ago5
typo in phpxmlrpc/extras/2017-10-29.yaml ?
Closed 7 years ago2
Advistories typo
Closed 7 years ago3
Feature request: extend the schema to allow tags
Closed 8 years ago6
Upcoming Magento security enhancements
Closed 8 years ago
Updating the database?
Closed 8 years ago
Add drupal/core
Closed 8 years ago
Yaml parsing fails with `symfony/yaml` 3.0.0
Closed 9 years ago2