From 1f89c26026da56334a88871b9148bbd8220e94fe Mon Sep 17 00:00:00 2001 From: terrafrost Date: Mon, 26 Feb 2024 08:41:01 -0600 Subject: [PATCH] Composer: require phpseclib 2.0.47 phpseclib 2.0.47 does not introduce any new features that mcrypt_compat makes use of, however, in some cases, it might be benificial to have new releases to prevent phpseclib versions with CVEs issued against them from ever being used as dependencies as discussed in https://github.com/phpseclib/mcrypt_compat/issues/37 --- composer.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/composer.json b/composer.json index 3ca798e..6c5fc60 100644 --- a/composer.json +++ b/composer.json @@ -22,7 +22,7 @@ }, "require": { "php": ">=5.3.3", - "phpseclib/phpseclib": ">=2.0.36 <3.0.0" + "phpseclib/phpseclib": ">=2.0.47 <3.0.0" }, "require-dev": { "phpunit/phpunit": "^4.8.35|^5.7|^6.0|^9.4"