VYPR

google-maps

by Alexpechkarev

CVEs (1)

  • CVE-2026-105222HigOct 4, 2026
    risk 0.48cvss 7.4epss —

    The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl_verify_peer to FALSE, which is passed to CURLOPT_SSL_VERIFYPEER. On-path attackers can present any certificate to intercept Google…