diff --git a/cpansa/CPANSA-Valiant.yml b/cpansa/CPANSA-Valiant.yml new file mode 100644 index 0000000..13bc5ec --- /dev/null +++ b/cpansa/CPANSA-Valiant.yml @@ -0,0 +1,22 @@ +--- +advisories: + - affected_versions: + - '<0.002011' + cves: [] + description: | + closed potential security issue with deeply nested paramters in the DBIC glue code. This was a hack that could let someone create a child record if you were allowing find_by_unique rather than find by primary key. + fixed_versions: + - '>=0.002011' + github_security_advisory: [] + id: CPANSA-Valiant-2024-001 + references: + - https://github.com/briandfoy/cpan-security-advisory/issues/175 + - https://github.com/jjn1056/Valiant/commit/242348776cc01e736397767f11f86cc4055817c4 + reported: ~ + severity: ~ +cpansa_version: 2 +distribution: Valiant +last_checked: 1733650659 +latest_version: 0.002011 +metacpan: https://metacpan.org/pod/Valiant +repo: https://github.com/jjn1056/Valiant