Information Disclosure

Valinor is vulnerable to Information Disclosure. Valinor has access to ThrowablegetMessage, which can disclose sensitive information such as database passwords or system memory details...

CVE-2022-31140 Valinor error messages leading to potential data exfiltration

Valinor is a PHP library that helps to map any input into a strongly-typed value object structure. Prior to version 0.12.0, Valinor can use ThrowablegetMessage when it should not have permission to do so. This is a problem with cases such as an SQL exception showing an SQL snippet, a database...