advisory-database icon indicating copy to clipboard operation
advisory-database copied to clipboard
verified publisher icon github

lightning RCE is not fixed in 2.2.2

Open anderruiz opened this issue 1 year ago • 1 comments

GHSA-cgwc-qvrx-rf7f advisory is not solved in version 2.2.2 for lightning, at least version 2.2.5 is vulnerable

anderruiz avatar Jun 11 '24 16:06 anderruiz

Hey @anderruiz, any chance there's some public documentation supporting that? What we have on file now is not that 2.2.2 fixes the issue but rather that 2.2.1 is the last known version which is affected. If it's shown that other versions are also affected that would be fantastic to know 😄

darakian avatar Jun 12 '24 17:06 darakian