Skip to content
OpenAdvisories

Package · Packagist

nzo/url-encryptor-bundle

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-r2r8-36pq-27cm

    nzo/url-encryptor-bundle Insecure default secret key and IV allowing anyone to decrypt values

    Versions of nzo/url-encryptor-bundle prior to 5.0.1 and 4.3.2 are affected by a security vulnerability related to the lack of mandatory key and IV requirements. By default, the bundle uses the aes-256-ctr algorithm, which is susceptible to malleability attack…

    nzo/url-encryptor-bundle Packagist