flightphp/core
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Flight: HTTP method override enabled by default, facilitating CSRF escalation and middleware bypass | flightphp/core | Composer | High | Fix reported | |
| Flight vulnerable to sensitive information disclosure via default error handler | flightphp/core | Composer | High | Fix reported | |
| Flight has reflected XSS through an unvalidated JSONP callback in Flight::jsonp() | flightphp/core | Composer | High | Fix reported | |
| Flight has path traversal in `make:controller` CLI that creates arbitrary directories outside project root | flightphp/core | Composer | Medium | Fix reported | |
| Flight vulnerable to SQL Injection via unvalidated identifiers in SimplePdo::insert / update / delete | flightphp/core | Composer | High | Fix reported |