pkg:Packagist/flightphp/core

All known vulnerabilities

• HIGH8.8CVE-2026-42550Flight vulnerable to SQL Injection via unvalidated identifiers in SimplePdo::insert / update / delete
  from 0, < 3.18.1
• HIGH7.5CVE-2026-42552Flight vulnerable to sensitive information disclosure via default error handler
  from 0, < 3.18.1
• HIGH7.5CVE-2026-42551Flight: HTTP method override enabled by default, facilitating CSRF escalation and middleware bypass
  from 0, < 3.18.1
• MEDIUM4.4Flight has path traversal in `make:controller` CLI that creates arbitrary directories outside project root
  from 0, < 3.18.1
• —Flight has reflected XSS through an unvalidated JSONP callback in Flight::jsonp()
  from 0, < 3.18.1