url-signer vulnerabilities

CVEs whose affected-version data names the url-signer package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121589Medium· 5.3

5d ago

spatie url-signer URL Validation AbstractUrlSigner.php validate type conversion

A weakness has been identified in spatie url-signer up to 2.1.3. Affected is the function AbstractUrlSigner::validate of the file AbstractUrlSigner.php of the component URL Validation. This manipulation of the argument expires causes inc…

▾ Sunlitspatie · url-signerEPSS 0.42%via CVEORG