Is symbiote/silverstripe-multivaluefield affected by GHSA-g5vj-wj9x-4jg9?

Packagist symbiote/silverstripe-multivaluefield is affected in >=3.0.0 <3.1.0.

Is GHSA-g5vj-wj9x-4jg9 being exploited?

Not on the CISA KEV list. EPSS exploit probability is not available.

medium

GHSA-g5vj-wj9x-4jg9

Q: Is GHSA-g5vj-wj9x-4jg9 being exploited?

Not on the CISA KEV list. EPSS exploit probability is not available.

Packagist · symbiote/silverstripe-multivaluefield

Summary

symbiote/silverstripe-multivaluefield Possible PHP Object Injection via Multi-Value Field Extension

Severity: medium
Published: 2024-05-29

References

https://github.com/symbiote/silverstripe-multivaluefield/commit/31fbc8c208431fc7d7e96da6fa39ca057d978953
https://github.com/symbiote/silverstripe-multivaluefield/commit/f523dfcb13b2bd9eb110ffa0c83087a49322ad3b
https://github.com/FriendsOfPHP/security-advisories/blob/master/symbiote/silverstripe-multivaluefield/SS-2018-017-1.yaml

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Check my repo

Summarize with AI

ChatGPT Claude Perplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.