Roave / SecurityAdvisories

:closed_lock_with_key: Security advisories as a simple composer exclusion list, updated daily
MIT License
2.72k stars 106 forks source link

Conflict with drupal/core-recommended #135

Closed Ihnatsevych closed 2 months ago

Ihnatsevych commented 2 months ago

New version conflict with drupal core recommended ">=8,<=11.0.4": https://github.com/Roave/SecurityAdvisories/commit/4d2e39c44028ba729fe50efdf731d3d2ede4046b

Ocramius commented 2 months ago

This repo only follows the upstream CVEs: Drupal is marked insecure there.

https://github.com/advisories/GHSA-mg8j-w93w-xjgc

This repo will update automatically when the upstream CVEs are updated.