Skip to content
OpenAdvisories

Package · Packagist

kreait/firebase-php

1 known vulnerabilities.

1 result · Feed

  • High 8.1

    Jerome Gamez Firebase Admin SDK for PHP Incorrect Access Control vulnerability

    Jerome Gamez Firebase Admin SDK for PHP version from 3.2.0 to 3.8.0 contains a Incorrect Access Control vulnerability in src/Firebase/Auth/IdTokenVerifier.php does not verify for token signature that can result in JWT with any email address and user ID could …