From f3ad1342426e4c964063e7bf24d65749b2ad8f1a Mon Sep 17 00:00:00 2001 From: Allan Laal Date: Wed, 7 Feb 2024 22:24:42 +0200 Subject: [PATCH] FIX vulnerability CVE-2021-43608 (#1392) Doctrine DBAL 3.x before 3.1.4 allows SQL Injection: https://www.cve.org/CVERecord?id=CVE-2021-43608 Co-authored-by: Barry vd. Heuvel --- composer.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/composer.json b/composer.json index 537d760..18e3902 100644 --- a/composer.json +++ b/composer.json @@ -24,7 +24,7 @@ "ext-json": "*", "barryvdh/reflection-docblock": "^2.0.6", "composer/class-map-generator": "^1.0", - "doctrine/dbal": "^2.6 || ^3", + "doctrine/dbal": "^2.6 || ^3.1.4", "illuminate/console": "^9 || ^10", "illuminate/filesystem": "^9 || ^10", "illuminate/support": "^9 || ^10",