MEDIUMPackagist
GHSA-2jx3-65f3-xr8rspomky-labs/otphp: Mass-assignment in Factory::loadFromProvisioningUri lets a hostile provisioning URI corrupt OTP state or leak an uncaught TypeError
Modified: 9/10/2026
package
Packagist/spomky-labs/otphp
pkg:packagist/spomky-labs/otphp
HIGHPackagist
GHSA-g7m4-839x-ch6vspomky-labs/otphp: Unbounded digits parameter in a provisioning URI triggers an uncaught DivisionByZeroError in OTP generation
Modified: 9/10/2026