Problem with security - Githubissues

baopham / laravel-dynamodb

Eloquent syntax for DynamoDB

https://packagist.org/packages/baopham/dynamodb

MIT License

484 stars 128 forks source link

Problem with security #283

Open SkrebtsovHeorhii opened 1 month ago

SkrebtsovHeorhii commented 1 month ago

You are using aws/aws-sdk-php version 3.0 but that version has some security problems https://security.snyk.io/vuln/SNYK-PHP-AWSAWSSDKPHP-6137984 Can you try upgrade aws/aws-sdk-php to version 3.288.1 or higher?

thebatclaudio commented 1 month ago

We are using caret version range: https://github.com/baopham/laravel-dynamodb/blob/1ed80905706ff4631e2a9ecd3d228dd16c9f772e/composer.json#L10

In fact in my project I see 3.308.1 version installed. Have you checked if you have installed any other package that is based on a specific version of aws-sdk?