Skip to content
OpenAdvisories

Package · Packagist

spatie/image-optimizer

1 known vulnerabilities.

1 result · Feed

  • High 8.8

    image-optimizer allows PHAR deserialization

    image-optimizer before 1.7.3 allows PHAR deserialization, e.g., the phar:// protocol in arguments to file_exists().