Advisories
Security advisories for PHP and JavaScript packages.
Every Composer and npm advisory Porro tracks, by package, newest first. From Packagist and the GitHub advisory database, synced hourly.
Recent advisories
RSS29 NOV 2012
Request::getClientIp() when the trust proxy mode is enabled
fixed in 2.0.19 · 2.1.4
28 AUG 2012
19 MAR 2012
Routes behind a firewall are accessible even when not logged in
fixed in 2.0.19
Routes behind a firewall are accessible even when not logged in
fixed in 2.0.19
24 FEB 2012
XML decoding attack vector through external entities
fixed in 2.0.11
1 JUN 2010
XSS vulnerability exploitable on Internet Explorer
fixed in 4.1.1
26 APR 2010
Multiple XSS vulnerabilities exploitable on Internet Explorer
fixed in 4.1.0
Know when your sites are affected.
Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.