Threats affecting pkg:composer/phpmyadmin/sql-parser

A vulnerability exists in phpMyAdmin SQL-Parser versions 6.0.0 and 6.0.1 in the parse function of src/Statements/ExplainStatement.php. The flaw involves incorrect type conversion due to manipulation of the nextToken argument. This vulnerability can be exploited remotely and public exploit code is available. The vendor has not responded to the disclosure. The vulnerability has a CVSS score of 5.3, indicating medium severity, and impacts availability but not confidentiality or integrity.