Skip to content
OpenAdvisories

Package · Packagist

endroid/qr-code-bundle

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-mvf6-3f2g-xfxf

    endroid/qr-code-bundle File Disclosure via logo_path query parameter

    Versions of endroid/qr-code-bundle prior to 3.4.2 are affected by a security vulnerability that allows disclosure of files through the logo_path query parameter. The vulnerability arises from the improper handling of non-image data as the logo, which could le…

    endroid/qr-code-bundle Packagist