Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

sabberworm/php-css-parser

1 known vulnerability, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
1
Registry
Packagist

Advisories 1

  • Sabberworm PHP CSS Parser before 8.3.1 calls eval on uncontrolled data, possibly leading to remote code execution if the function…

    Affected: from 8.3.0, fixed in 8.3.1; from 8.2.0, fixed in 8.2.1; from 8.1.0, fixed in 8.1.1; from 8.0.0, fixed in 8.0.1; from 7.0.0, fixed in 7.0.4; from 6.0.0, fixed in 6.0.2; from 5.2.0, fixed in 5.2.1; from 5.1.0, fixed in 5.1.3; from 5.0.0, fixed in 5.0.9; from 4.0.0, fixed in 4.0.1; from 3.0.0, fixed in 3.0.1; from 2.0.0, fixed in 2.0.1; from 1.0.0, fixed in 1.0.1.