Here we updated the min required craft version to 3.9.0 because of following two issues:
The Yiisoft/yii2 has released a fix for sql injection vulnerability in version >= v2.0.47.
Craft cms vulnerable to Remote Code Execution via validatePath bypass fixed in v3.8.15. However the issue was fixed in 3.8.15 but we decided to go with 3.9.0 which also has the min yiisoft/yii2 version required to 2.0.48.
Related Issue(s):
[Cite any related issues or feature requests, using the GitHub issue link.]
Changes Made:
[List the changes made in this pull request to address the issue or implement the feature.]
Added:
Changed:
-
Deprecated:
-
Removed:
-
Fixed:
-
Security:
-
Testing:
[Describe the testing performed to ensure the changes are functioning as expected.]
Quality Assurance (QA):
[ ] The code has been reviewed and approved by the QA team.
[ ] The changes have been tested on different environments (e.g., staging, production).
[ ] Integration tests have been performed to verify the interactions between components.
[ ] Performance tests have been conducted to ensure the changes do not impact system performance.
[ ] Any necessary database migrations or data transformations have been executed successfully.
[ ] Accessibility requirements have been considered and tested (e.g., screen reader compatibility, keyboard navigation).
Resources:
Screenshots (if applicable):
[Include any relevant screenshots to visually demonstrate the changes.]
Wrapping up
Checklist:
[ ] The code builds without any errors or warnings.
[ ] The code follows the project's coding conventions and style guidelines.
[ ] Unit tests have been added or updated to cover the changes made.
[ ] The documentation has been updated to reflect the changes (if applicable).
[ ] All new and existing tests pass successfully.
[ ] The PR has been reviewed by at least one other team member.
Additional Notes:
[Include any additional notes, considerations, or context that may be relevant.]
Pull Request
Description:
Here we updated the min required craft version to
3.9.0because of following two issues:Yiisoft/yii2has released a fix for sql injection vulnerability in version >=v2.0.47.v3.8.15. However the issue was fixed in3.8.15but we decided to go with3.9.0which also has the minyiisoft/yii2version required to2.0.48.Related Issue(s):
[Cite any related issues or feature requests, using the GitHub issue link.]
Changes Made:
[List the changes made in this pull request to address the issue or implement the feature.]
Added:
Changed:
-
Deprecated:
-
Removed:
-
Fixed:
-
Security:
-
Testing:
[Describe the testing performed to ensure the changes are functioning as expected.]
Quality Assurance (QA):
Resources:
Screenshots (if applicable): [Include any relevant screenshots to visually demonstrate the changes.]
Wrapping up
Checklist:
Additional Notes: [Include any additional notes, considerations, or context that may be relevant.]