Vulnerability a'la Snyk

barryvdh / laravel-snappy

Laravel Snappy PDF

MIT License

2.59k stars 289 forks source link

Vulnerability a'la Snyk #526

Open AbrahamBrookes opened 6 months ago

AbrahamBrookes commented 6 months ago

https://security.snyk.io/vuln/SNYK-PHP-KNPLABSKNPSNAPPY-5885100

Snyk advises we need to upgrade our snappy version to >1.4.3 in order to remove a critical vulnerability. laravel-snappy currently uses ^1.4, should probably be ^1.4.3

AbrahamBrookes commented 6 months ago

and now I see there is already a PR in: https://github.com/barryvdh/laravel-snappy/pull/513/commits nice! pls merge