barryvdh/laravel-snappy

Vulnerability a'la Snyk

AbrahamBrookes opened this issue · 1 comments

https://security.snyk.io/vuln/SNYK-PHP-KNPLABSKNPSNAPPY-5885100

Snyk advises we need to upgrade our snappy version to >1.4.3 in order to remove a critical vulnerability. laravel-snappy currently uses ^1.4, should probably be ^1.4.3

and now I see there is already a PR in: https://github.com/barryvdh/laravel-snappy/pull/513/commits nice! pls merge