https://db.gcve.eu/sightings/feed 2026-05-26T14:58:08.312382+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/52dc49a1-9332-4786-af54-ec8bbcb03219/export 2026-05-26T14:58:08.696719+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "52dc49a1-9332-4786-af54-ec8bbcb03219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-31140", "type": "seen", "source": "https://t.me/cibsecurity/45947", "content": "\u203c CVE-2022-31140 \u203c\n\nValinor is a PHP library that helps to map any input into a strongly-typed value object structure. Prior to version 0.12.0, Valinor can use `Throwable#getMessage()` when it should not have permission to do so. This is a problem with cases such as an SQL exception showing an SQL snippet, a database connection exception showing database IP address/username/password, or a timeout detail / out of memory detail. Attackers could use this information for potential data exfiltration, denial of service attacks, enumeration attacks, etc. Version 0.12.0 contains a patch for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-12T00:19:37.000000Z"} 2022-07-12T00:19:37+00:00