spomky-labs/otphp vulnerabilities (Packagist)
2 vulnerabilities.
-
spomky-labs/otphpPackagist spomky-labs/otphp: Mass-assignment in Factory::loadFromProvisioningUri lets a hostile provisioning URI corrupt OTP state or leak an uncaught TypeError 6.9 Medium -
spomky-labs/otphpPackagist spomky-labs/otphp: Unbounded digits parameter in a provisioning URI triggers an uncaught DivisionByZeroError in OTP generation 8.7 High