spomky-labs/otphp Security Advisories | GitStock

medium2026-06-18

spomky-labs/otphp: Mass-assignment in Factory::loadFromProvisioningUri lets a hostile provisioning URI corrupt OTP state or leak an uncaught TypeError

GHSA-2jx3-65f3-xr8r

high2026-06-18

spomky-labs/otphp: Unbounded digits parameter in a provisioning URI triggers an uncaught DivisionByZeroError in OTP generation

GHSA-g7m4-839x-ch6v