-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stemmed from two key functions: 1) shouldDecrypt() used an anchored regex that couldn't handle special characters in NullEncoder output, failing to detect tags. 2) decrypt() depended on this flawed detection and regex-based extraction. The patch replaced both the detection (with str_contains) and extraction (with substr/strpos), confirming these were the vulnerable components.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| ilicmiljan/secure-props | composer | >= 1.2.0, < 1.2.2 | 1.2.2 |