Skip to content
OpenAdvisories

Vendor

saloonphp

3 known vulnerabilities.

Products

saloon 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.6
    CVE-2026-33182

    Saloon is vulnerable to SSRF and credential leakage via absolute URL in endpoint overriding base URL

    Saloon is a PHP library that gives users tools to build API integrations and SDKs. Prior to version 4.0.0, when building the request URL, Saloon combined the connector's base URL with the request endpoint. If the endpoint was a valid absolute URL, the code us…

    saloonphp saloon saloonphp/saloon Packagist