[MEDIUM] State guessing vulnerability

PKSA-633b-bdtt-33gv GHSA-h97c-qp24-439v

Affected version: >=1.0.0,<1.0.99|>=2.0.0,<2.0.10

Reported by:
GitHub, FriendsOfPHP/security-advisories