| Package | Affected versions | Patched versions |
|---|---|---|
| silverstripe/framework | ≥ 4.0.0-rc1, < 4.0.5≥ 4.1.0-rc1, < 4.1.3≥ 4.2.0-rc1, < 4.2.2 | 4.0.54.1.34.2.2 |
A possible denial of service attack vector has been identified in the dev/build system controller.
dev/build now has its own URL token, similar to flushtoken, to ensure users are authenticated when running dev/build outside of dev environments.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free