Skip to content
OpenAdvisories

Package · Packagist

league/oauth2-server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.2
    CVE-2023-37260

    league/oauth2-server key exposed in exception message when passing as string and providing invalid pass phrase

    league/oauth2-server is an implementation of an OAuth 2.0 authorization server written in PHP. Starting in version 8.3.2 and prior to version 8.5.3, servers that passed their keys to the CryptKey constructor as as string instead of a file path will have had t…

    thephpleague oauth2-server league/oauth2-server Packagist