Threats tagged 'ghsa-p33r-pgmg-6pq6'

A weakness in spatie url-signer versions up to 2.1.3 affects the AbstractUrlSigner::validate function due to incorrect type conversion caused by manipulation of the expires argument. This vulnerability can be exploited remotely and has publicly available exploit code. Upgrading to version 2.1.4 addresses the issue.