Search by 
nzo/url-encryptor-bundle Security Advisories for v4.3.1 (1)
-
Insecure default secret key and IV allowing anyone to decrypt values
Affected version: >=5.0.0,<5.0.1|>=4.0.0,<4.3.2
Reported by:
FriendsOfPHP/security-advisories