Skip to content
OpenAdvisories

Vendor

packistry

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 4.3

    Packistry accepts expired access tokens

    Packistry is a self-hosted Composer repository designed to handle PHP package distribution. Prior to version 0.13.0, RepositoryAwareController::authorize() verified token presence and ability, but did not enforce token expiration. As a result, an expired depl…