CVE-2026-55374
1 advisory.
Packagist/jleehr/canto-saas-api CVE-2026-55374: medium 4.8, EPSS 0.36%
canto-saas-api: Authenticated API requests can be redirected via unencoded path variables
Action: Upgrade jleehr/canto-saas-api to 3.0.0 or later.
composer require jleehr/canto-saas-api:3.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.0 | - |
Fixed versions
| 3.0.0 |
Sources
- osv: GHSA-9qfv-wgh2-m6p8
- https://github.com/jleehr/canto-saas-api/security/advisories/GHSA-9qfv-wgh2-m6p8
- https://github.com/jleehr/canto-saas-api
CVE-2026-55374 · published · modified · JSON