PT-2023-33016 · Symfony · Symfony/Process

Publicado 2023-01-26 · Atualizado 2023-01-26

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions symfony/process (affected versions not specified)

Description A malicious Composer package called symfont/process was discovered, which is a typosquat targeting users of symfony/process. The package has been removed from Packagist.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

GHSA-G3J5-MPP2-2FQM

Produtos afetados

Symfony/Process

Referências · 3

• https://github.com/FriendsOfPHP/security-advisories/blob/master/symfont/process/2021-09-10.yaml · Nota
• https://kernelmode.blog/typosquatting-malware-found-in-composer-repository · Nota
• https://osv.dev/vulnerability/GHSA-g3j5-mpp2-2fqm · Aviso do Fabricante