validate version numbers

src/Model/VersionRange.php

@@ -7,10 +7,20 @@
 
 readonly class VersionRange
 {
+    public const string VERSION_REGEX = '/^(\d+\.)(\d+\.)(\d+)$/';
+
     public function __construct(
         private ?string $minVersion,
         private ?string $maxVersion,
     ) {
+        if ($minVersion !== null && preg_match(self::VERSION_REGEX, $minVersion) === 0) {
+            throw new InvalidArgumentException('Invalid min version number: ' . $minVersion);
+        }
+
+        if ($maxVersion !== null && preg_match(self::VERSION_REGEX, $maxVersion) === 0) {
+            throw new InvalidArgumentException('Invalid max version number: ' . $maxVersion);
+        }
+
         if ($minVersion !== null && $maxVersion !== null && version_compare($minVersion, $maxVersion, '>')) {
             throw new InvalidArgumentException('minVersion must be less than or equal to maxVersion');
         }

src/Service/Scanner/Health/HealthScanner.php

@@ -4,6 +4,7 @@
 namespace Gared\EtherScan\Service\Scanner\Health;
 
 use Gared\EtherScan\Model\Config;
+use Gared\EtherScan\Model\VersionRange;
 use Gared\EtherScan\Service\ScannerServiceCallbackInterface;
 use Gared\EtherScan\Service\VersionRangeService;
 use GuzzleHttp\Client;
@@ -38,6 +39,11 @@ public function scan(Config $config, VersionRangeService $versionRangeService, S
             return;
         }
 
+        if (preg_match(VersionRange::VERSION_REGEX, $healthData['releaseId']) === 0) {
+            $callback->onHealthException(new HealthResponseException('Invalid version in realeaseId: ' . $healthData['releaseId']));
+            return;
+        }
+
         $callback->onHealthResult($healthData);
         $versionRangeService->setHealthVersion($healthData['releaseId']);
     }

src/Service/Scanner/PluginDefinitionScanner.php

@@ -31,6 +31,7 @@ public function scan(Config $config, ScannerServiceCallbackInterface $callback):
                 }
 
                 $onlyPlugins = $data['plugins'];
+                unset($onlyPlugins['ep_etherpad-lite']);
                 $callback->onScanPluginsList($onlyPlugins);
             } catch (JsonException $e) {
                 $callback->onScanApiException($e);