Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via unescaped JMESPath handling in the CompilerRuntime. An attacker can execute PHP source code by supplying a malicious JMESPath expression, which is included in a cache file and subsequently executed. In...