Saloonphp vulnerabilities
We track 3 vulnerabilities in Saloonphp products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 26, 2026.
Latest Saloonphp vulnerabilities
- 9.8 Critical severity
saloon: Deserialization of Untrusted Data
Saloon is a PHP library that gives users tools to build API integrations and SDKs. Versions prior to 4.0.0 used PHP's unserialize() in AccessTokenAuthenticator::unserialize() to restore OAuth token state from cache or storage, with allowed_classes => true. An
- 9.1 Critical severity
saloon: Improper Limitation of a Pathname to a Restricted Directory
Saloon is a PHP library that gives users tools to build API integrations and SDKs. Prior to version 4.0.0, fixture names were used to build file paths under the configured fixture directory without validation. A name containing path segments (e.g. ../traversal
- 7.5 High severity
saloon: Insufficiently Protected Credentials
Saloon is a PHP library that gives users tools to build API integrations and SDKs. Prior to version 4.0.0, when building the request URL, Saloon combined the connector's base URL with the request endpoint. If the endpoint was a valid absolute URL, the code use