CVE-2026-103831

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...

CVE-2026-103831 Insecure deserialization in the TrueLayer Magento 2 plugin

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...

CVE-2026-103831 Insecure deserialization in the TrueLayer Magento 2 plugin

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...

CVE-2026-103831

The TrueLayer Magento 2 plugin contains an insecure deserialization vulnerability in the Psr16CacheAdapter component. The root cause is the use of PHP's native unserialize() function without restricting allowed classes when retrieving data from the cache. An attacker with the ability to write man...

EUVD-2026-93363

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...

PT-2026-106707

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...

CVE-2026-103831: Deserialization of Untrusted Data

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...

Malicious code in truelayer-assignment (npm)

The package truelayer-assignment was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cb2b1d58a741e8bce6ef15fb465d4c1d070891603626cd0ff81d09e23d05a76 Any computer that has this package installed or running should be considered fully...

Malicious Package

Overview truelayer-assignment is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview truelayer-service is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in truelayer-service (npm)

The package truelayer-service was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc9900a38cc6f7543f01f0f226e5ac0ddf01b51bdc46b2e5da6caaf06ecc3155 Any computer that has this package installed or running should be considered fully...

Malware in truelayer-service

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in truelayer-assignment

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-47569 Malicious code in truelayer-service (npm)

The package truelayer-service was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc9900a38cc6f7543f01f0f226e5ac0ddf01b51bdc46b2e5da6caaf06ecc3155 Any computer that has this package installed or running should be considered fully...

MAL-2025-47568 Malicious code in truelayer-assignment (npm)

The package truelayer-assignment was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cb2b1d58a741e8bce6ef15fb465d4c1d070891603626cd0ff81d09e23d05a76 Any computer that has this package installed or running should be considered fully...

CVE-2024-23838

TrueLayer.NET is the .Net client for TrueLayer. The vulnerability could potentially allow a malicious actor to gain control over the destination URL of the HttpClient used in the API classes. For applications using the SDK, requests to unexpected resources on local networks or to the internet cou...

Malicious code in truelayer-for-woocommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b29c75990176d19762517dd4d6e52e6c8b1f434a2089b4bfc95fca56e7cd0a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1184 Malicious code in truelayer-for-woocommerce (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b29c75990176d19762517dd4d6e52e6c8b1f434a2089b4bfc95fca56e7cd0a3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-23838 TrueLayer.Client SSRF when fetching payment or payment provider

TrueLayer.NET is the .Net client for TrueLayer. The vulnerability could potentially allow a malicious actor to gain control over the destination URL of the HttpClient used in the API classes. For applications using the SDK, requests to unexpected resources on local networks or to the internet cou...

CVE-2024-23838 TrueLayer.Client SSRF when fetching payment or payment provider

TrueLayer.NET is the .Net client for TrueLayer. The vulnerability could potentially allow a malicious actor to gain control over the destination URL of the HttpClient used in the API classes. For applications using the SDK, requests to unexpected resources on local networks or to the internet cou...