[MEDIUM] Disclosure of files via logo_path query parameter

PKSA-swh3-zyrm-86q1 GHSA-mvf6-3f2g-xfxf

Affected package: endroid/qr-code-bundle

Affected version: <3.4.2

Reported by:
FriendsOfPHP/security-advisories, GitHub