[HIGH] RCE affecting Windows hosts via UNC paths to translation files

PKSA-35kn-2ddp-d3p4 CVE-2021-34551 GHSA-7q44-r25x-wm4q

Affected version: <6.5.0

Reported by:
GitHub, FriendsOfPHP/security-advisories

[LOW] Untrusted code may be run from an overridden address validator

PKSA-m8by-bb7v-7qt5 CVE-2021-3603 GHSA-77mr-wc79-m8j3

Affected version: <6.5.0

Reported by:
GitHub, FriendsOfPHP/security-advisories

[CRITICAL] Object injection via local phar file

PKSA-1pdn-z57v-5nzg CVE-2020-36326 GHSA-m298-fh5c-jc66

Affected version: >=6.1.8,<6.4.1

Reported by:
GitHub, FriendsOfPHP/security-advisories