~ / search / GHSA-xh9g-cp3v-p8q4

GHSA-xh9g-cp3v-p8q4

Missing Authorization in Crater Invoice

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-0203

Packages

EcosystemPackageAffectedFixed in
Packagist bytefury/crater < 6.0.2 6.0.2

Details

As written in the advisory (Markdown source, shown as plain text).

Crater Invoice prior to version 6.0.2 has a missing authorization vulnerability..

References

External links from the advisory. They lead to third-party sites.