CVE-2026-121589

A weakness in the spatie url-signer component (up to version 2.1.3 ) allows for a remote attack due to incorrect type conversion. The vulnerability exists in the AbstractUrlSigner::validate function within the AbstractUrlSigner.php file, where manipulation of the expires argument triggers the fla...

CVE-2026-121589

A weakness has been identified in spatie url-signer up to 2.1.3. Affected is the function AbstractUrlSigner::validate of the file AbstractUrlSigner.php of the component URL Validation. This manipulation of the argument expires causes incorrect type conversion. It is possible to initiate the attac...

CVE-2026-121589 spatie url-signer URL Validation AbstractUrlSigner.php validate type conversion

A weakness has been identified in spatie url-signer up to 2.1.3. Affected is the function AbstractUrlSigner::validate of the file AbstractUrlSigner.php of the component URL Validation. This manipulation of the argument expires causes incorrect type conversion. It is possible to initiate the attac...