flysystem vulnerabilities

CVEs whose affected-version data names the flysystem package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-102601Low· 3.5PoC

yesterday

Flysystem is an open source file storage library for PHP

Flysystem is an open source file storage library for PHP. Prior to 3.35.3, the default WhitespacePathNormalizer in src/WhitespacePathNormalizer.php used by Filesystem across adapters calls preg_match with the u modifier and treats both f…

▾ Twilightthephpleague · flysystemvia NVD