thephpleague Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by thephpleague

JSON RSS CSV 🔔 Create Alert Trigger

6 August 2026

PHP Library Parsing Vulnerability in League/Commonmark by The PHP League
CVE-2026-71488
ThePHPleagueCommonmark7.5HIGH

6 July 2023

league/oauth2-server key exposed in exception message when passing as string and providing invalid pass phrase
CVE-2023-37260
ThePHPleagueOauth2-server8.2HIGH

24 June 2021

Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem
CVE-2021-32708
ThePHPleagueFlysystem👾🟡9.8CRITICAL