Skip to content
OpenAdvisories

Package · Packagist

cuyz/valinor

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2022-31140

    Valinor error messages leading to potential data exfiltration

    Valinor is a PHP library that helps to map any input into a strongly-typed value object structure. Prior to version 0.12.0, Valinor can use `Throwable#getMessage()` when it should not have permission to do so. This is a problem with cases such as an SQL excep…

    CuyZ Valinor cuyz/valinor Packagist
  • High —
    GHSA-xhr8-mpwq-2rr2

    Automatic named constructor discovery in Valinor

    ## Design issue - automatic constructor discovery The issue arises when upgrading from `cuyz/valinor:0.3.0` to a newer system on an existing application, which broke due to the wrong constructor being picked. Still, a bigger security concern is problematic, a…

    cuyz/valinor Packagist