Cross-Site Scripting in third party library mso/idna-convert
Moderate severity
GitHub Reviewed
Published
Jun 5, 2024
to the GitHub Advisory Database
Package
Affected versions
>= 7.6.0, < 7.6.10
>= 8.0.0, < 8.2.1
Patched versions
7.6.10
8.2.1
Description
Published to the GitHub Advisory Database
Jun 5, 2024
Reviewed
Jun 5, 2024
Make sure to not expose the vendor directory to the publicly accessible document root. In composer managed installation, make sure to configure a dedicated web folder. In general it is recommended to not expose the complete typo3_src sources folder in the document root.
References