Repository navigation
Security: thephpleague/flysystem
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapterGHSA-cxf4-7mrp-vvpr published
Sep 4, 2026 by frankdejongeModerate -
Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystemGHSA-9f46-5r25-5wfm published
Jun 23, 2021 by frankdejongeCritical