- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2 · 2 medium
- Registry
- Packagist
Advisories 2
- CVE-2025-31683Medium 6.8
Google Tag - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-012
Affected: fixed in 1.8.0; from 2.0.0, fixed in 2.0.8; fixed in 1.8.0; from 2.0.0, fixed in 2.0.8.
- CVE-2025-31682Medium 4.8
Google Tag - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-011
Affected: fixed in 1.8.0; from 2.0.0, fixed in 2.0.8; fixed in 1.8.0; from 2.0.0, fixed in 2.0.8.