Likely permanent: GitHub doesn’t review this ecosystem

GHSA-cx8g-hvq8-p2rv

Cacti on php · published in cacti/cacti

Read the advisory on GitHub ↗

Fixed in 1.2.27. Dependabot, npm audit and OSV-Scanner probably never will. Find it in your project

Facts

Severity: High
Affected versions: <= 1.2.26As entered by the maintainer. Not reviewed.
Fixed in: 1.2.27
CVE: CVE-2024-31459 · published
GitHub Advisory Database: Not reviewed
OSV.dev: Not present
Other CVEs pointing here: CVE-2024-31460 (published by another CNA)

If you use Cacti <= 1.2.26

Upgrade to 1.2.27 or later. Dependabot, npm audit and OSV-Scanner probably never will.

Timeline

2024-05-12 21:16 UTC
Published by the maintainers
Cites CVE-2024-31459
2026-10-30 13:08 UTC
First seen by Limbowatch
not reviewed · not in OSV
Not expected
Reviewed by GitHub
GitHub doesn’t review this ecosystem

Machine-readable record: feed/GHSA-cx8g-hvq8-p2rv.json