Fix facade/ignition CVE-2021-3129

The vulnerability in `facade/ignition` is falsely reported for version 2.4.2. It has been fixed in facade/ignition#334 for 2.5.x, and in facade/ignition#356 for 2.4.x. Fixes FriendsOfPHP#543
particleflux · Mar 26, 2021 · 790c79d · 790c79d
1 parent bebf66b
commit 790c79d
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/facade/ignition/CVE-2021-3129.yaml b/facade/ignition/CVE-2021-3129.yaml
@@ -4,7 +4,10 @@ cve:       CVE-2021-3129
 branches:
     "master":
         time:     2020-11-17 09:18:00
-        versions: ['<=2.5.1', '>=2.0']
+        versions: ['<=2.5.1', '>=2.5.0']
+    "2.4.x":
+        time:     2020-11-17 09:18:00
+        versions: ['<=2.4.1', ">=2.0.0"]
     "1.x":
         time:     2021-02-13 10:47:03
         versions: ['<=1.16.13']