Skip to content
OpenAdvisories

Vendor

saloonphp

3 known vulnerabilities.

Products

saloon 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-33942

    Saloon has insecure deserialization in AccessTokenAuthenticator (object injection / RCE)

    Saloon is a PHP library that gives users tools to build API integrations and SDKs. Versions prior to 4.0.0 used PHP's unserialize() in AccessTokenAuthenticator::unserialize() to restore OAuth token state from cache or storage, with allowed_classes => true. An…

    saloonphp saloon saloonphp/saloon Packagist
  • High 8.0
    CVE-2026-33183

    Saloon has a Fixture Name Path Traversal Vulnerability

    Saloon is a PHP library that gives users tools to build API integrations and SDKs. Prior to version 4.0.0, fixture names were used to build file paths under the configured fixture directory without validation. A name containing path segments (e.g. ../traversa…

    saloonphp saloon saloonphp/saloon Packagist