Skip to content
OpenAdvisories

Vendor

jleehr

2 known vulnerabilities.

Products

canto-saas-api 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-55374

    canto-saas-api: Authenticated API requests can be redirected via unencoded path variables

    canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, Request::buildRequestUrl() joins values returned by Request::getPathVariables() without encoding individual path segments, including the scheme and contentId valu…

    jleehr canto-saas-api jleehr/canto-saas-api Packagist
  • Medium 5.3
    CVE-2026-55375

    canto-saas-api: OAuth credentials exposed in URL query string and exception messages

    canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, OAuth2Request::getQueryParams() places app_id, app_secret, refresh_token, and code in the URL query string of token POST requests, allowing access logs, proxy log…

    jleehr canto-saas-api jleehr/canto-saas-api Packagist