WS-2018-0595

In TYPO3 phar-stream-wrapper before 2.0.1 and before 3.0.1, It has been discovered that the protection against insecure deserialization can be by-passed in PharStreamWrapper component...