Contrib.social

Module SendinBlue considered "insecure" by "composer audit"

Open on Drupal.org →
Created on 26 September 2023, over 1 year ago
Updated 2 October 2023, over 1 year ago

Problem/Motivation

Since ✨ Implement “list security advisories” Packagist/Composer API Fixed , composer audit works with Drupal modules.
It considers that every version of sendinblue is vulnerable:

+-------------------+----------------------------------------------------------------------------------+
| Package           | drupal/sendinblue                                                                |
| CVE               | NO CVE                                                                           |
| Title             | SendinBlue - Critical - Unsupported - SA-CONTRIB-2019-088                        |
| URL               | https://www.drupal.org/sa-contrib-2019-088                                       |
| Affected versions | *                                                                                |
| Reported at       | 2019-11-13T18:09:57+00:00                                                        |
+-------------------+----------------------------------------------------------------------------------+

It seems to happen because the module was unsupported at some point.

Steps to reproduce

Install the sendinblue module with Composer.
Run composer audit.

🐛 Bug report
Status

Fixed

Version

1.0

Component

Miscellaneous

Created by

🇫🇷France prudloff Lille

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024