GHSA-m9fv-whq2-6wmc

Summary

Drupal core Multiple vulnerabilities due to the use of the third-party library Archive_Tar

Severity

high

Published

2024-05-15

References

• https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/2019-12-18-4.yaml
• https://github.com/drupal/drupal
• https://www.drupal.org/sa-core-2019-012

Related advisories

• GHSA-jf8c-36vw-98x4 — critical · Packagist/drupal/drupal
• GHSA-jjx7-8462-w4m4 — critical · Packagist/drupal/drupal
• CVE-2018-7602 — critical · Packagist/drupal/drupal
• CVE-2018-7600 — critical · Packagist/drupal/drupal
• CVE-2024-55638 — high · Packagist/drupal/drupal
• CVE-2024-55637 — high · Packagist/drupal/drupal
• GHSA-j66p-fvp2-fxhj — high · Packagist/drupal/drupal
• CVE-2019-6340 — high · Packagist/drupal/drupal

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Summarize with AI

ChatGPTClaudePerplexity