saloonphp/saloon vulnerabilities (Packagist)

3 vulnerabilities.

• saloonphp/saloon Packagist Saloon has insecure deserialization in AccessTokenAuthenticator (object injection / RCE) CVE-2026-33942 Fix available 8.1 HighMarch 26, 2026
• saloonphp/saloon Packagist Saloon has a Fixture Name Path Traversal Vulnerability CVE-2026-33183 Fix available 8.0 HighMarch 25, 2026
• saloonphp/saloon Packagist Saloon is vulnerable to SSRF and credential leakage via absolute URL in endpoint overriding base URL CVE-2026-33182 Fix available 6.6 MediumMarch 25, 2026