Disclosure of files via logo_path query parameter

PKSA-swh3-zyrm-86q1

Affected package: endroid/qr-code-bundle

Affected version: <3.4.2

Reported by:
FriendsOfPHP/security-advisories