kreait/firebase-php Security Advisories for 3.4.2 (1)
-
Incorrect Access Control vulnerability in src/Firebase/Auth/IdTokenVerifier.php does not verify for token signature that can result in JWT with any email address and user ID could be forged from an actual token, or from thin air.
PKSA-bkkv-pqnd-d5ym CVE-2018-1000025
Affected version: >=3.2.0,<3.8.1
Reported by:
FriendsOfPHP/security-advisories