flightphp/core
Composer · بسته
اطلاعرسانی آسیبپذیری
دنبالکردن| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|---|---|---|---|---|
| Flight: HTTP method override enabled by default, facilitating CSRF escalation and middleware bypass | flightphp/core | Composer | زیاد | اصلاح گزارش شده | |
| Flight vulnerable to sensitive information disclosure via default error handler | flightphp/core | Composer | زیاد | اصلاح گزارش شده | |
| Flight has reflected XSS through an unvalidated JSONP callback in Flight::jsonp() | flightphp/core | Composer | زیاد | اصلاح گزارش شده | |
| Flight has path traversal in `make:controller` CLI that creates arbitrary directories outside project root | flightphp/core | Composer | متوسط | اصلاح گزارش شده | |
| Flight vulnerable to SQL Injection via unvalidated identifiers in SimplePdo::insert / update / delete | flightphp/core | Composer | زیاد | اصلاح گزارش شده |