search

googleapis / google-api-php-client

A PHP client library for accessing Google APIs
Apache License 2.0
9.2k stars 3.52k forks source link

Security vulnerabilities in specific phpseclib/phpseclib dependency #2537

Closed gravelld closed 6 months ago

gravelld commented 6 months ago

Thanks for this project. Due to these vulnerabilities:

The minimum version for phpseclib/phpseclib should be 3.0.34. This means the entry in composer.json should be:

    "phpseclib/phpseclib": "^3.0.34",

Is this something you are likely to change and issue a release for?

bshaffer commented 6 months ago

Fixed in https://github.com/googleapis/google-api-php-client/pull/2524 and released in https://github.com/googleapis/google-api-php-client/releases/tag/v2.15.2