Merge pull request FriendsOfPHP#549 from legoktm/CVE-2021-30458

Add CVE-2021-30458 in wikimedia/parsoid
sumityadav · Apr 9, 2021 · e92b79c · e92b79c
2 parents c7c916c + 010da95
commit e92b79c
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/wikimedia/parsoid/CVE-2021-30458.yaml b/wikimedia/parsoid/CVE-2021-30458.yaml
@@ -0,0 +1,10 @@
+title:     Parsoid comment fostering allows for inserting mostly arbitrary <meta> tags
+link:      https://phabricator.wikimedia.org/T279451
+cve:       CVE-2021-30458
+branches:
+    0.12.x:
+        time:     2021-04-08 05:36:00
+        versions: ['<0.12.2']
+
+reference: composer://wikimedia/parsoid
+