TI-2026-26293 CVE-2026-33942 · GHSA-rf88-776r-rcq9
Saloon has insecure deserialization in AccessTokenAuthenticator (object injection / RCE)
Priority MEDIUM 44
Saloon is a PHP library that gives users tools to build API integrations and SDKs.
saloonphp
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
saloonphp records in CISA KEVNo saloonphp vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records in Saloon · all components
TI-2026-25611 CVE-2026-33183 · GHSA-f7xc-5852-fj99
Saloon has a Fixture Name Path Traversal Vulnerability
Priority MEDIUM 44
Saloon is a PHP library that gives users tools to build API integrations and SDKs.
TI-2026-25610 CVE-2026-33182 · GHSA-c83f-3xp6-hfcp
Saloon is vulnerable to SSRF and credential leakage via absolute URL in endpoint overriding base URL
Priority LOW 36
Saloon is a PHP library that gives users tools to build API integrations and SDKs.