Vulnerabilities > Thephpleague

DATE CVE VULNERABILITY TITLE RISK
2023-07-06 CVE-2023-37260 Information Exposure Through an Error Message vulnerability in Thephpleague Oauth2-Server
league/oauth2-server is an implementation of an OAuth 2.0 authorization server written in PHP.
network
low complexity
thephpleague CWE-209
7.5
2021-06-24 CVE-2021-32708 Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in multiple products
Flysystem is an open source file storage library for PHP.
network
high complexity
thephpleague fedoraproject CWE-367
8.1
2019-03-24 CVE-2019-10010 Cross-site Scripting vulnerability in Thephpleague Commonmark
Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library before 0.18.3 allows remote attackers to insert unsafe links into HTML by using double-encoded HTML entities that are not properly escaped during rendering, a different vulnerability than CVE-2018-20583.
network
low complexity
thephpleague CWE-79
6.1
2018-12-30 CVE-2018-20583 Cross-site Scripting vulnerability in Thephpleague Commonmark
Cross-site scripting (XSS) vulnerability in the PHP League CommonMark library versions 0.15.6 through 0.18.x before 0.18.1 allows remote attackers to insert unsafe URLs into HTML (even if allow_unsafe_links is false) via a newline character (e.g., writing javascript as javascri%0apt).
network
low complexity
thephpleague CWE-79
6.1