VYPR

url-signer

by Spatie

CVEs (1)

  • CVE-2026-121589MedNov 4, 2026
    risk 0.27cvss 5.3epss —

    A weakness has been identified in spatie url-signer up to 2.1.3. Affected is the function AbstractUrlSigner::validate of the file AbstractUrlSigner.php of the component URL Validation. This manipulation of the argument expires causes incorrect type conversion. It is possible to…