Requesting fix CVE-2023-29530 for 2.17.*

laminas / laminas-diactoros

PSR HTTP Message implementations

https://docs.laminas.dev/laminas-diactoros/

BSD 3-Clause "New" or "Revised" License

487 stars 63 forks source link

Closed easterncoder closed 4 months ago

easterncoder commented 4 months ago

As it stands right now, I'd have to use 2.18.1 or higher but those versions require PHP 8.

I need to support PHP 7.4 for my project and only 2.17.0 will work with but it has the CVE-2023-29530 vulnerability.

Would it be possible to officially release 2.17.1 (I saw it in the milestone) so I don't have to manually patch my copy.

Thanks!

Ocramius commented 4 months ago

PHP 7.4 is EOL: versions for PHP releases that are EOL are also closed for security patches.