aimeos/aimeos-laravel ver. 2021.10.7 => laminas/laminas-diactoros problem

[krzysiekp]

I have aimeos/aimeos-laravel ver. 2021.10.7. After composer update appeared to me "Found 6 security vulnerability advisories affecting 3 packages". After doing composer audit i have something like this:


How to fix it ?

[aimeos]

Can you post the output of "composer show"?

[krzysiekp]

Code: Select all

aimeos-extensions/new-ext          dev-master Aimeos new-ext extension
aimeos/ai-admin-jqadm              2021.10.19 Aimeos Vue.js+Bootstrap admin interface
aimeos/ai-admin-jsonadm            2021.10.5  Aimeos ai-admin-jsonadm extension
aimeos/ai-client-html              2021.10.20 Aimeos ai-client-html extension
aimeos/ai-client-jsonapi           2021.10.6  Aimeos JSON API extension
aimeos/ai-controller-frontend      2021.10.7  Aimeos ai-controller-frontend extension
aimeos/ai-controller-jobs          2021.10.10 Aimeos ai-controller-jobs extension
aimeos/ai-gettext                  2021.10.3  Aimeos Gettext extension
aimeos/ai-laravel                  2021.10.4  Laravel adapter for Aimeos web shops and e-commerce solutions
aimeos/ai-swiftmailer              2021.10.2  SwiftMailer adapter for Aimeos web shops and e-commerce solutions
aimeos/aimeos-core                 2021.10.25 Full-featured e-commerce components for high performance online shops
aimeos/aimeos-laravel              2021.10.7  Professional, full-featured and high performance Laravel e-commerce package for online shops and complex B2B projects
aimeos/map                         2.6.1      Easy and elegant handling of PHP arrays as array-like map objects similar to jQuery and Laravel Collections
asm89/stack-cors                   v2.1.1     Cross-origin resource sharing library and stack middleware
azuyalabs/yasumi                   2.6.0      The easy PHP Library for calculating holidays.
bacon/bacon-qr-code                2.0.8      BaconQrCode is a QR code generator for PHP.
barryvdh/laravel-snappy            v0.4.8     Snappy PDF/Image for Laravel
brick/math                         0.9.3      Arbitrary-precision arithmetic library
dasprid/enum                       1.0.4      PHP 7.1 enum implementation
dflydev/dot-access-data            v3.0.2     Given a deep data structure, access data by dot notation.
doctrine/cache                     2.2.0      PHP Doctrine Cache library is a popular cache implementation that supports many different drivers such as redis, memcache, apc, mongodb and others.
doctrine/dbal                      2.13.9     Powerful PHP database abstraction layer (DBAL) with many features for database schema introspection and management.
doctrine/deprecations              v1.1.1     A small layer on top of trigger_error(E_USER_DEPRECATED) or PSR-3 logging with options to disable all deprecations or selectively for packages.
doctrine/event-manager             1.2.0      The Doctrine Event Manager is a simple PHP event system that was built to be used with the various Doctrine projects.
doctrine/inflector                 2.0.8      PHP Doctrine Inflector is a small library that can perform string manipulations with regard to upper/lowercase and singular/plural forms of words.
doctrine/instantiator              1.5.0      A small, lightweight utility to instantiate objects in PHP without invoking their constructors
doctrine/lexer                     1.2.3      PHP Doctrine Lexer parser library that can be used in Top-Down, Recursive Descent Parsers.
dompdf/dompdf                      v1.2.2     DOMPDF is a CSS 2.1 compliant HTML to PDF converter
dragonmantank/cron-expression      v3.3.2     CRON for PHP: Calculate the next or previous run date and determine if a CRON expression is due
egulias/email-validator            2.1.25     A library for validating emails against several RFCs
enshrined/svg-sanitize             0.15.4     An SVG sanitizer for PHP
ezyang/htmlpurifier                v4.16.0    Standards compliant HTML filter written in PHP
facade/flare-client-php            1.10.0     Send PHP errors to Flare
facade/ignition                    2.17.7     A beautiful error page for Laravel applications.
facade/ignition-contracts          1.0.2      Solution contracts for Ignition
faisalman/simple-excel-php         v0.3.15    Easily parse / convert / write between Microsoft Excel XML / CSV / TSV / HTML / JSON / etc formats
fakerphp/faker                     v1.23.0    Faker is a PHP library that generates fake data for you.
fideloper/proxy                    4.4.2      Set trusted proxies for Laravel
filp/whoops                        2.15.2     php error handling for cool kids
fruitcake/laravel-cors             v2.2.0     Adds CORS (Cross-Origin Resource Sharing) headers support in your Laravel application
goodby/csv                         1.3.0      CSV import/export library
graham-campbell/result-type        v1.1.1     An Implementation Of The Result Type
guzzlehttp/guzzle                  7.7.0      Guzzle is a PHP HTTP client library
guzzlehttp/promises                2.0.0      Guzzle promises library
guzzlehttp/psr7                    2.5.0      PSR-7 message implementation that also provides common utility methods
hamcrest/hamcrest-php              v2.0.1     This is the PHP port of Hamcrest Matchers
intervention/image                 2.7.2      Image handling and manipulation library with support for Laravel integration
jaybizzle/crawler-detect           v1.2.115   CrawlerDetect is a PHP class for detecting bots/crawlers/spiders via the user agent
jenssegers/agent                   v2.6.4     Desktop/mobile user agent parser with support for Laravel, based on Mobiledetect
jschaedl/iban-validation           v1.8.4     A small library for validating International BankAccount Numbers (IBANs).
knplabs/knp-snappy                 v1.4.2     PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Wrapper for wkhtmltopdf/wkhtmltoimage.
laminas/laminas-diactoros          2.17.0     PSR HTTP Message implementations
laravel/dusk                       v6.25.2    Laravel Dusk provides simple end-to-end testing and browser automation.
laravel/fortify                    v1.17.4    Backend controllers and scaffolding for Laravel authentication.
laravel/framework                  v8.83.27   The Laravel Framework.
laravel/jetstream                  v2.9.0     Tailwind scaffolding for the Laravel framework.
laravel/sail                       v1.19.0    Docker files for running a basic Laravel application.
laravel/sanctum                    v2.15.1    Laravel Sanctum provides a featherweight authentication system for SPAs and simple APIs.
laravel/serializable-closure       v1.3.0     Laravel Serializable Closure provides an easy and secure way to serialize closures in PHP.
laravel/tinker                     v2.8.1     Powerful REPL for the Laravel framework.
laravelcollective/html             v6.4.1     HTML and Form Builders for the Laravel Framework
league/commonmark                  2.4.0      Highly-extensible PHP Markdown parser which fully supports the CommonMark spec and GitHub-Flavored Markdown (GFM)
league/config                      v1.2.0     Define configuration arrays with strict schemas and access values with dot notation
league/csv                         9.8.0      CSV data manipulation made easy in PHP
league/flysystem                   1.1.10     Filesystem abstraction: Many filesystems, one API.
league/glide                       1.7.2      Wonderfully easy on-demand image manipulation library with an HTTP based API.
league/mime-type-detection         1.11.0     Mime-type detection for Flysystem
livewire/livewire                  v2.12.3    A front-end framework for Laravel.
maennchen/zipstream-php            2.2.6      ZipStream is a library for dynamically streaming dynamic zip files from PHP without writing to the disk at all on the server.
markbaker/complex                  3.0.2      PHP Class for working with complex numbers
markbaker/matrix                   3.0.1      PHP Class for working with matrices
michael-schaefer-eu/wkhtmltox      0.12.5     wkhtmltopdf and wkhtmltoimage linux binaries - Convert HTML to PDF or IMAGE using Webkit (QtWebKit)
microsoft/microsoft-graph          1.100.0    The Microsoft Graph SDK for PHP
mobiledetect/mobiledetectlib       2.8.41     Mobile_Detect is a lightweight PHP class for detecting mobile devices. It uses the User-Agent string combined with specific HTTP headers to detect the mobile environment.
mockery/mockery                    1.6.2      Mockery is a simple yet flexible PHP mock object framework
monolog/monolog                    2.9.1      Sends your logs to files, sockets, inboxes, databases and various web services
myclabs/deep-copy                  1.11.1     Create deep copies (clones) of your objects
myclabs/php-enum                   1.8.4      PHP Enum implementation
nesbot/carbon                      2.67.0     An API extension for DateTime that supports 281 different languages.
nette/schema                       v1.2.3     📐 Nette Schema: validating data structures against a given Schema.
nette/utils                        v3.2.9     🛠  Nette Utils: lightweight utilities for string & array manipulation, image handling, safe JSON e ncoding/decoding, validation, slug or strong password generating etc.
nikic/php-parser                   v4.16.0    A PHP parser written in PHP
nunomaduro/collision               v5.11.0    Cli error handling for console/command-line PHP applications.
nyholm/psr7                        1.8.0      A fast PHP7 implementation of PSR-7
opis/closure                       3.6.3      A library that can be used to serialize closures (anonymous functions) and arbitrary objects.
paragonie/constant_time_encoding   v2.6.3     Constant-time Implementations of RFC 4648 Encoding (Base-64, Base-32, Base-16)
parsecsv/php-parsecsv              1.3.2      CSV data parser for PHP
phar-io/manifest                   2.0.3      Component for reading phar.io manifest information from a PHP Archive (PHAR)
phar-io/version                    3.2.1      Library for handling version information and constraints
phenx/php-font-lib                 0.5.4      A library to read, parse, export and make subsets of different types of font files.
phenx/php-svg-lib                  0.4.1      A library to read, parse and export to PDF SVG files.
php-webdriver/webdriver            1.14.0     A PHP client for Selenium WebDriver. Previously facebook/webdriver.
phpoffice/phpspreadsheet           1.29.0     PHPSpreadsheet - Read, Create and Write Spreadsheet documents in PHP - Spreadsheet engine
phpoption/phpoption                1.9.1      Option Type for PHP
phpunit/php-code-coverage          9.2.26     Library that provides collection, processing, and rendering functionality for PHP code coverage information.
phpunit/php-file-iterator          3.0.6      FilterIterator implementation that filters files based on a list of suffixes.
phpunit/php-invoker                3.1.1      Invoke callables with a timeout
phpunit/php-text-template          2.0.4      Simple template engine.
phpunit/php-timer                  5.0.3      Utility class for timing
phpunit/phpunit                    9.6.9      The PHP Unit Testing framework.
picqer/php-barcode-generator       v2.2.4     An easy to use, non-bloated, barcode generator in PHP. Creates SVG, PNG, JPG and HTML images from the most used 1D barcode standards.
pragmarx/google2fa                 v8.0.1     A One Time Password Authentication package, compatible with Google Authenticator.
psr/container                      1.1.2      Common Container Interface (PHP FIG PSR-11)
psr/event-dispatcher               1.0.0      Standard interfaces for event handling.
psr/http-client                    1.0.2      Common interface for HTTP clients
psr/http-factory                   1.0.2      Common interfaces for PSR-7 HTTP message factories
psr/http-message                   1.1        Common interface for HTTP messages
psr/log                            1.1.4      Common interface for logging libraries
psr/simple-cache                   1.0.1      Common interfaces for simple caching
psy/psysh                          v0.11.18   An interactive shell for modern PHP.
ralouphie/getallheaders            3.0.3      A polyfill for getallheaders.
ramsey/collection                  1.3.0      A PHP library for representing and manipulating collections.
ramsey/uuid                        4.2.3      A PHP library for generating and working with universally unique identifiers (UUIDs).
rootinc/laravel-azure-middleware   0.9.10     Azure Middleware Auth
sabberworm/php-css-parser          8.4.0      Parser for CSS Files written in PHP
sebastian/cli-parser               1.0.1      Library for parsing CLI options
sebastian/code-unit                1.0.8      Collection of value objects that represent the PHP code units
sebastian/code-unit-reverse-lookup 2.0.3      Looks up which function or method a line of code belongs to
sebastian/comparator               4.0.8      Provides the functionality to compare PHP values for equality
sebastian/complexity               2.0.2      Library for calculating the complexity of PHP code units
sebastian/diff                     4.0.5      Diff implementation
sebastian/environment              5.1.5      Provides functionality to handle HHVM/PHP environments
sebastian/exporter                 4.0.5      Provides the functionality to export PHP variables for visualization
sebastian/global-state             5.0.5      Snapshotting of global state
sebastian/lines-of-code            1.0.3      Library for counting the lines of code in PHP source code
sebastian/object-enumerator        4.0.4      Traverses array structures and object graphs to enumerate all referenced objects
sebastian/object-reflector         2.0.4      Allows reflection of object attributes, including inherited and non-public ones
sebastian/recursion-context        4.0.5      Provides functionality to recursively process PHP variables
sebastian/resource-operations      3.0.3      Provides a list of PHP built-in functions that operate on resources
sebastian/type                     3.2.1      Collection of value objects that represent the types of the PHP type system
sebastian/version                  3.0.2      Library that helps with managing the version number of Git-hosted PHP projects
setasign/fpdi                      v2.3.7     FPDI is a collection of PHP classes facilitating developers to read pages from existing PDF documents and use them as templates in FPDF. Because it is also possible to use FPDI wit...   
spatie/browsershot                 3.57.8     Convert a webpage to an image or pdf using headless Chrome
spatie/db-dumper                   2.21.1     Dump databases
spatie/image                       1.10.6     Manipulate images with an expressive API
spatie/image-optimizer             1.6.4      Easily optimize images using PHP
spatie/laravel-backup              6.16.5     A Laravel package to backup your application
spatie/laravel-permission          5.10.1     Permission handling for Laravel 6.0 and up
spatie/temporary-directory         1.3.0      Easily create, use and destroy temporary directories
swiftmailer/swiftmailer            v6.3.0     Swiftmailer, free feature-rich PHP mailer
symfony/console                    v5.4.24    Eases the creation of beautiful and testable command line interfaces
symfony/css-selector               v5.4.21    Converts CSS selectors to XPath expressions
symfony/deprecation-contracts      v2.5.2     A generic function and convention to trigger deprecation notices
symfony/error-handler              v5.4.24    Provides tools to manage errors and ease debugging PHP code
symfony/event-dispatcher           v5.4.22    Provides tools that allow your application components to communicate with each other by dispatching events and listening to them
symfony/event-dispatcher-contracts v2.5.2     Generic abstractions related to dispatching event
symfony/finder                     v5.4.21    Finds files and directories via an intuitive fluent interface
symfony/http-foundation            v5.4.25    Defines an object-oriented layer for the HTTP specification
symfony/http-kernel                v5.4.25    Provides a structured process for converting a Request into a Response
symfony/mime                       v5.4.23    Allows manipulating MIME messages
symfony/options-resolver           v5.4.21    Provides an improved replacement for the array_replace PHP function
symfony/polyfill-ctype             v1.27.0    Symfony polyfill for ctype functions
symfony/polyfill-iconv             v1.27.0    Symfony polyfill for the Iconv extension
symfony/polyfill-intl-grapheme     v1.27.0    Symfony polyfill for intl's grapheme_* functions
symfony/polyfill-intl-idn          v1.27.0    Symfony polyfill for intl's idn_to_ascii and idn_to_utf8 functions
symfony/polyfill-intl-normalizer   v1.27.0    Symfony polyfill for intl's Normalizer class and related functions
symfony/polyfill-mbstring          v1.27.0    Symfony polyfill for the Mbstring extension
symfony/polyfill-php72             v1.27.0    Symfony polyfill backporting some PHP 7.2+ features to lower PHP versions
symfony/polyfill-php73             v1.27.0    Symfony polyfill backporting some PHP 7.3+ features to lower PHP versions
symfony/polyfill-php80             v1.27.0    Symfony polyfill backporting some PHP 8.0+ features to lower PHP versions
symfony/polyfill-php81             v1.27.0    Symfony polyfill backporting some PHP 8.1+ features to lower PHP versions
symfony/process                    v5.4.24    Executes commands in sub-processes
symfony/psr-http-message-bridge    v2.2.0     PSR HTTP message bridge
symfony/routing                    v5.4.25    Maps an HTTP request to a set of configuration variables
symfony/service-contracts          v2.5.2     Generic abstractions related to writing services
symfony/string                     v5.4.22    Provides an object-oriented API to strings and deals with bytes, UTF-8 code points and grapheme clusters in a unified way
symfony/translation                v5.4.24    Provides tools to internationalize your application
symfony/translation-contracts      v2.5.2     Generic abstractions related to translation
symfony/var-dumper                 v5.4.25    Provides mechanisms for walking through any arbitrary PHP variable
symfony/yaml                       v5.4.23    Loads and dumps YAML files
tecnickcom/tcpdf                   6.6.2      TCPDF is a PHP class for generating PDF documents and barcodes.
theseer/tokenizer                  1.2.1      A small library for converting tokenized PHP source code into XML and potentially other formats
tijsverkoyen/css-to-inline-styles  2.2.6      CssToInlineStyles is a class that enables you to convert HTML-pages/files into HTML-pages/files with inline styles. This is very useful when you're sending emails.
vlucas/phpdotenv                   v5.5.0     Loads environment variables from `.env` to `getenv()`, `$_ENV` and `$_SERVER` automagically.
voku/portable-ascii                1.6.1      Portable ASCII library - performance optimized (ascii) string functions for php.
webmozart/assert                   1.11.0     Assertions to validate method input/output with nice error messages.

[aimeos]

The fixed versions for laminas/laminas-diactoros need PHP 8.0+ and it seems you still use PHP 7.3/7.4