- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 2 high, 1 medium
- Registry
- Packagist
Advisories 3
- CVE-2026-33942High 8.1
Saloon has insecure deserialization in AccessTokenAuthenticator (object injection / RCE)
Affected: fixed in 4.0.0.
- CVE-2026-33183High 8.0
Saloon has a Fixture Name Path Traversal Vulnerability
Affected: fixed in 4.0.0.
- CVE-2026-33182Medium 6.6
Saloon is vulnerable to SSRF and credential leakage via absolute URL in endpoint overriding base URL
Affected: fixed in 4.0.0.