limbo.watch
Menu

In limbo for 1,938 days

GHSA-7vx5-x39w-q24g

woocommerce/woocommerce on Packagist · published in woocommerce/woocommerce

Read the advisory on GitHub ↗

Facts

Severity
Critical
Affected versions
>= 3.3As entered by the maintainer. Not reviewed. Scanners can’t read this range. How to fix it
Fixed in
> 5.5.1, 5.5.1, 5.4.2, 5.3.1, 5.2.3, 5.1.1, 5.0.1, 4.9.3, 4.8.1, 4.7.2, 4.6.3, 4.5.3, 4.4.2, 4.3.4, 4.2.3, 4.1.2, 4.0.2, 3.9.4, 3.8.2, 3.7.2, 3.6.6, 3.5.9, 3.4.8, 3.3.6
CVE
CVE-2021-32790 · published
GitHub Advisory Database
Not reviewed
OSV.dev
Not present
Other CVEs pointing here
None found in the CVE List
NVD
Modified

If you use woocommerce/woocommerce >= 3.3

The fixed-version field says “> 5.5.1, 5.5.1, 5.4.2, 5.3.1, 5.2.3, 5.1.1, 5.0.1, 4.9.3, 4.8.1, 4.7.2, 4.6.3, 4.5.3, 4.4.2, 4.3.4, 4.2.3, 4.1.2, 4.0.2, 3.9.4, 3.8.2, 3.7.2, 3.6.6, 3.5.9, 3.4.8, 3.3.6”. Check the advisory for which version fixes it. Dependabot, npm audit and OSV-Scanner won’t flag this yet.

Timeline

  1. 2021-07-23 10:52 UTC

    Published by the maintainers

    Cites CVE-2021-32790

  2. 2026-10-28 09:43 UTC

    First seen by Limbowatch

    not reviewed · not in OSV

  3. Waiting

    Reviewed by GitHub

  4. Waiting

    In OSV; scanners can see it

Machine-readable record: feed/GHSA-7vx5-x39w-q24g.json