Saloonphp Saloon vulnerabilities

• saloon Saloon has insecure deserialization in AccessTokenAuthenticator (object injection / RCE) CVE-2026-33942 Fix available 8.1 HighMarch 26, 2026
• saloon Saloon has a Fixture Name Path Traversal Vulnerability CVE-2026-33183 Fix available 8.0 HighMarch 25, 2026
• saloon Saloon is vulnerable to SSRF and credential leakage via absolute URL in endpoint overriding base URL CVE-2026-33182 Fix available 6.6 MediumMarch 25, 2026