Description
ai-client-html is an Aimeos e-commerce HTML client component. Debug information revealed sensitive information from environment variables in error log. This issue has been patched in versions 2024.04.7, 2023.10.15, 2022.10.13 and 2021.10.22.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| aimeos | ai-client-html | >= 2024.04.1, < 2024.04.7, >= 2023.04.1, < 2023.10.15, >= 2022.04.1, < 2022.10.13, >= 2021.10.1, < 2021.10.22 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | aimeos/ai-client-html | >= 2024.04.1, < 2024.04.7 | 2024.04.7 | GHSA-ppm5-jv84-2xg2 |
| Packagist | aimeos/ai-client-html | >= 2023.04.1, < 2023.10.15 | 2023.10.15 | GHSA-ppm5-jv84-2xg2 |
| Packagist | aimeos/ai-client-html | >= 2022.04.1, < 2022.10.13 | 2022.10.13 | GHSA-ppm5-jv84-2xg2 |
| Packagist | aimeos/ai-client-html | >= 2021.10.1, < 2021.10.22 | 2021.10.22 | GHSA-ppm5-jv84-2xg2 |