Advisories for package kreait/firebase-php

Listing reported advisories for package kreait/firebase-php sorted by their report date.

Jerome Gamez Firebase Admin SDK for PHP Incorrect Access Control vulnerability
GitHub

kreait/firebase-php

>= 3.2.0, < 3.8.1

2024-04-24 18:31:05
Incorrect Access Control vulnerability in src/Firebase/Auth/IdTokenVerifier.php does not verify for token signature that can result in JWT with any email address and user ID could be forged from an actual token, or from thin air.
FriendsOfPHP

kreait/firebase-php

>=3.2.0, <3.8.1

2018-01-16 10:51:00

Need help?

We are happy to help you with any questions you might have.

Documentation Roadmap Report a bug Get in touch