search

microsoftgraph / msgraph-sdk-php

Microsoft Graph Library for PHP.
Other
578 stars 144 forks source link

Security vulnerabilities in specific guzzlehttp/guzzle versions affecting 1.x #1433

Closed gravelld closed 10 months ago

gravelld commented 11 months ago

Thanks for this project. Due to these vulnerabilities:

The minimum version for guzzlehttp/guzzle should be 6.5.8. This means the entry in composer.json should be:

    "guzzlehttp/guzzle": "^6.5.8 || ^7.4.4",

Is this something you are likely to change and issue a new 1.x release for?

Ndiritu commented 10 months ago

Thanks for raising this @gravelld! Making the changes.