Alexpechkarev vulnerabilities
We track 1 vulnerability in Alexpechkarev products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 4, 2026.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest Alexpechkarev vulnerabilities
- 7.4 High severity
google-maps: Improper Certificate Validation
The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl_verify_peer to FALSE, which is passed to CURLOPT_SSL_VERIFYPEER. On-path attackers can present any certificate to i