Skip to main content
← Packagist

verbb/knock-knock

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
Packagist

Advisories 2

  • The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.

    Affected: fixed in 1.2.8.

  • The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.

    Affected: fixed in 1.2.8.