GHSA-CVH5-P6R6-G2QC Exposed phpinfo() leadked via documentation files

Impact The phpinfo can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located outside the web directory or protected via server rule .htaccess, etc. Patches Only the v6, v7 and v8 will be patched respectively in...

CVE-2021-37704

CVE-2021-37704 affects PhpFastCache when the composer/vendor directory is not protected. The issue allows exposure of the phpinfo() page in unprotected /vendor, applicable to PHPFastCache versions prior to 6.1.5, 7.1.2, and 8.0.7. Patched releases are 6.1.5+ (for v6), 7.1.2+ (for v7), and 8.0.7+ ...