Skip to content

[4.x] / [5.x]: Update Yii requirement due to CVE in Yii #15124

@GewoonRoy

Description

@GewoonRoy

What happened?

Description

Is it possible to update yiisoft/yii2 to 2.0.50. the versions <= 2.0.49 are marked as a CVE vulnerability.

GHSA-cjcc-p67m-7qxm

Steps to reproduce

  1. Install composer

Craft CMS version

4 / 5

PHP version

8.1 / 8.2

Operating system and version

No response

Database type and version

No response

Image driver and version

No response

Installed plugins and versions

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions