Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Need to update package to latest version #89

Open
codexpert opened this issue Jun 25, 2024 · 0 comments
Open

Need to update package to latest version #89

codexpert opened this issue Jun 25, 2024 · 0 comments
Labels
dependencies Pull requests that update a dependency file

Comments

@codexpert
Copy link
Contributor

codexpert commented Jun 25, 2024

​My server admin found this when try to connect WooCommerce App​

​2024/06/21 08:19:22 [error] 1535147#1535147: *422223 [client 20.68.187.32] ModSecurity: Access denied with code 403 (phase 1). Matched "Operator Rx' with parameter guzzlehttp' against variable REQUEST_HEADERS:User-Agent' (Value: GuzzleHttp/7' ) [file "http://rules.malware.expert/download.php?rules=generic&extra=crawler,webshell,scanner"] [line "2518"] [id "913119"] [rev ""] [msg "Malware.Expert - Found User-Agent associated with scripting/generic GuzzleHttp"] [data ""] [severity "0"] [ver ""] [maturity "0"] [accuracy "0"] [hostname "45.32.125.141"] [uri"/"] [unique_id "171895796248.875380"] [ref "o0,10v103,12t:lowercase"], client: 20.68.187.32, server: th.seedwebs.com, request: "GET /?listener=thrivedesk&plugin=woocommerce&action=connect HTTP/1.1", host: "th.seedwebs.com"

​He said you has vendor file version that has cvs. GuzzleHttp/7

We need to update all the packages on next release. So server block old packages which has vulnerabilities.

@codexpert codexpert added the dependencies Pull requests that update a dependency file label Jun 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

No branches or pull requests

1 participant