Skip to content
OpenAdvisories

Vendor

CuyZ

1 known vulnerabilities.

Products

Valinor 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2022-31140

    Valinor error messages leading to potential data exfiltration

    Valinor is a PHP library that helps to map any input into a strongly-typed value object structure. Prior to version 0.12.0, Valinor can use `Throwable#getMessage()` when it should not have permission to do so. This is a problem with cases such as an SQL excep…

    CuyZ Valinor cuyz/valinor Packagist