Phalcon Cphalcon vulnerabilities
- phalcon cphalcon Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI lead to RCE) 9.2 Critical
- phalcon cphalcon Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS 8.7 High
- phalcon cphalcon Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel) 8.2 High