phalcon/cphalcon vulnerabilities (Packagist)
3 vulnerabilities.
-
phalcon/cphalconPackagist Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI lead to RCE) 9.2 Critical -
phalcon/cphalconPackagist Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS 8.7 High -
phalcon/cphalconPackagist Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel) 8.2 High