spomky-labs/otphp vulnerabilities
CVEs whose affected-version data names the spomky-labs/otphp package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
GHSA-g7m4-839x-ch6vHighspomky-labs/otphp: Unbounded digits parameter in a provisioning URI triggers an uncaught DivisionByZeroError in OTP generation
spomky-labs/otphp: Unbounded digits parameter in a provisioning URI triggers an uncaught DivisionByZeroError in OTP generation
▾ Twilightspomky-labs · spomky-labs/otphpvia GHSA
GHSA-2jx3-65f3-xr8rMediumspomky-labs/otphp: Mass-assignment in Factory::loadFromProvisioningUri lets a hostile provisioning URI corrupt OTP state or leak an uncaught TypeError
spomky-labs/otphp: Mass-assignment in Factory::loadFromProvisioningUri lets a hostile provisioning URI corrupt OTP state or leak an uncaught TypeError
▾ Sunlitspomky-labs · spomky-labs/otphpvia GHSA