Packagist/spomky-labs/otphp: medium
spomky-labs/otphp: Mass-assignment in Factory::loadFromProvisioningUri lets a hostile provisioning URI corrupt OTP state or leak an uncaught TypeError
Action: Upgrade spomky-labs/otphp to 11.4.3 or later.
composer require spomky-labs/otphp:11.4.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.4.3 | - |
Fixed versions
| 11.4.3 |
Sources
- osv: GHSA-2jx3-65f3-xr8r
- https://github.com/Spomky-Labs/otphp/security/advisories/GHSA-2jx3-65f3-xr8r
- https://github.com/FriendsOfPHP/security-advisories/blob/master/spomky-labs/otphp/GHSA-2jx3-65f3-xr8r.yaml
- https://github.com/Spomky-Labs/otphp
published · modified · JSON