Packagist/jleehr/canto-saas-api CVE-2026-55375: medium 5.3, EPSS 0.38%
canto-saas-api: OAuth credentials exposed in URL query string and exception messages
Action: Upgrade jleehr/canto-saas-api to 3.0.0 or later.
composer require jleehr/canto-saas-api:3.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.0 | - |
Fixed versions
| 3.0.0 |
Sources
- osv: GHSA-37pm-83g7-r22v
- https://github.com/jleehr/canto-saas-api/security/advisories/GHSA-37pm-83g7-r22v
- https://github.com/jleehr/canto-saas-api
CVE-2026-55375 · published · modified · JSON