Moodle Authenticated LFI risk in some misconfigured shared hosting environments
Packagist moodle/moodle · Upgrade to 4.3.4, 4.2.7 or 4.1.10 by release line · >= 4.3.0, < 4.3.4; >= 4.2.0, < 4.2.7; < 4.1.10 · CVE-2024-34005 · GHSA-r99q-hmqv-xw8w
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Packagist moodle/moodle · Upgrade to 4.3.4, 4.2.7 or 4.1.10 by release line · >= 4.3.0, < 4.3.4; >= 4.2.0, < 4.2.7; < 4.1.10 · CVE-2024-34005 · GHSA-r99q-hmqv-xw8w
Packagist moodle/moodle · Upgrade to 4.3.4, 4.2.7 or 4.1.10 by release line · >= 4.3.0, < 4.3.4; >= 4.2.0, < 4.2.7; < 4.1.10 · CVE-2024-34008 · GHSA-68x5-4jg5-gjgg
Packagist moodle/moodle · Upgrade to 4.3.4, 4.2.7 or 4.1.10 by release line · >= 4.3.0, < 4.3.4; >= 4.2.0, < 4.2.7; < 4.1.10 · CVE-2024-34002 · GHSA-mm9p-xwfm-3fqf
Packagist moodle/moodle · Upgrade to 4.3.4 or later · >= 4.3.0, < 4.3.4 · CVE-2024-34009 · GHSA-gwf6-q6c2-94p3
Packagist moodle/moodle · Upgrade to 4.3.4, 4.2.7 or 4.1.10 by release line · >= 4.3.0, < 4.3.4; >= 4.2.0, < 4.2.7; < 4.1.10 · CVE-2024-34001 · GHSA-gq9f-8rj4-w7jc
Packagist typo3/cms · Upgrade to 7.3.1 or 6.2.14 by release line · >= 6.2.0, < 6.2.14; >= 7.0.0, < 7.3.1 · GHSA-r9vc-jfmh-6j48
Packagist typo3/cms · Upgrade to 7.3.1 or 6.2.14 by release line · >= 6.2.0, < 6.2.14; >= 7.0.0, < 7.3.1 · GHSA-4r76-xr68-w7m7
Packagist typo3/cms · Upgrade to 6.2.6, 6.1.12, 4.7.20 or 4.5.37 by release line · >= 6.2.0, < 6.2.6; >= 6.1.0, < 6.1.12; >= 4.7.0, < 4.7.20; >= 4.5.0, < 4.5.37 · GHSA-45xg-4w5x-j429
Packagist typo3/cms-core · Upgrade to 9.5.12 or 8.7.30 by release line · >= 8.0.0, < 8.7.30; >= 9.0.0, < 9.5.12 · GHSA-5h5v-m596-r6rf
npm mysql2 · Upgrade to 3.9.8 or later · < 3.9.8 · CVE-2024-21512 · GHSA-pmh2-wpjm-fj45 · amended
Packagist typo3/cms-core · Upgrade to 9.5.8 or 8.7.27 by release line · >= 8.0.0, < 8.7.27; >= 9.0.0, < 9.5.8 · GHSA-x428-565f-8xj2
Packagist typo3/cms-core · Upgrade to 9.5.8 or 8.7.27 by release line · >= 8.0.0, < 8.7.27; >= 9.0.0, < 9.5.8 · GHSA-82vp-jr39-4j2j
Packagist typo3/cms-core · Upgrade to 9.5.4 or 8.7.23 by release line · >= 8.0.0, < 8.7.23; >= 9.0.0, < 9.5.4 · GHSA-f9hr-7cfq-mjg2
Packagist typo3/cms-core · Upgrade to 9.5.4 or 8.7.23 by release line · >= 8.0.0, < 8.7.23; >= 9.0.0, < 9.5.4 · GHSA-rxc9-f2x6-qh4w
Packagist typo3/cms-core · Upgrade to 8.7.21 or 7.6.32 by release line · >= 8.0.0, < 8.7.21; >= 7.0.0, < 7.6.32 · GHSA-hjx5-v9xg-7h25
Packagist typo3/cms-core · Upgrade to 9.5.2, 8.7.21 or 7.6.32 by release line · >= 8.0.0, < 8.7.21; >= 9.0.0, < 9.5.2; >= 7.0.0, < 7.6.32 · GHSA-ppvg-hw62-6ph9
Packagist typo3/cms-core · Upgrade to 9.3.1 or 8.7.17 by release line · >= 8.5.0, < 8.7.17; >= 9.0.0, < 9.3.1 · GHSA-96jg-pmc4-cx39
Packagist typo3/cms-core · Upgrade to 9.3.2 or 8.7.17 by release line · >= 8.5.0, < 8.7.17; >= 9.0.0, < 9.3.2 · GHSA-45wj-jv2h-jwrf
Packagist typo3/cms-core · Upgrade to 9.3.2, 8.7.17 or 7.6.30 by release line · >= 8.0.0, < 8.7.17; >= 9.0.0, < 9.3.2; >= 7.0.0, < 7.6.30 · GHSA-cc97-g92w-jm65
Packagist typo3/cms-core · Upgrade to 9.3.2, 8.7.17 or 7.6.30 by release line · >= 8.0.0, < 8.7.17; >= 9.0.0, < 9.3.2; >= 7.0.0, < 7.6.30 · GHSA-x4rj-f7m6-42c3
Packagist thelia/thelia · Upgrade to 2.1.3 or later · >= 2.0.0-beta1, < 2.1.3 · GHSA-g8pg-33v4-9r96
Packagist symfony/validator · Upgrade to 2.0.17 or later · >= 2.0.0, < 2.0.17 · GHSA-4vf2-qfg3-7598
Packagist symfony/translation · Upgrade to 2.0.17 or later · >= 2.0.0, < 2.0.17 · GHSA-f75p-x5vm-83qp
Packagist symfony/symfony +1 · Upgrade all 2 to 2.5.4, 2.4.9 or 2.3.19 by release line · >= 2.0.0, < 2.3.19; >= 2.4.0, < 2.4.9; >= 2.5.0, < 2.5.4 · CVE-2014-6072 · GHSA-v35g-4rrw-h4fw
Packagist symfony/symfony · Upgrade to 2.0.17 or later · >= 2.0.0, < 2.0.17 · GHSA-q2gc-gg3x-7942
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.