Packagist/saloonphp/saloon CVE-2026-33942: high, EPSS 0.63%
Saloon has insecure deserialization in AccessTokenAuthenticator
Action: Upgrade saloonphp/saloon to 4.0.0 or later.
composer require saloonphp/saloon:4.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.0 | - |
Fixed versions
| 4.0.0 |
Sources
- osv: GHSA-rf88-776r-rcq9
- https://github.com/saloonphp/saloon/security/advisories/GHSA-rf88-776r-rcq9
- https://nvd.nist.gov/vuln/detail/CVE-2026-33942
- https://docs.saloon.dev/upgrade/upgrading-from-v3-to-v4
- https://github.com/saloonphp/saloon
CVE-2026-33942 · published · modified · JSON