Skip to content
OpenAdvisories

Package · Packagist

fuel/core

2 known vulnerabilities.

2 results · Feed

  • Medium —

    fuel/core Crypt encryption compromised.

    In fuel/core versions pior to 1.8.1, with the right knowledge, code, and GPU calculation power, Crypt encryption can be broken in minutes.

  • High —

    fuel/core ImageMagick driver does not escape all shell arguments.

    This vulnerability may cause OS commands to be executed when you pass unvalidated image filenames containing specially crafted strings to the ImageMagick driver.