CPE
The alexpechkarev/google-maps Laravel package up to version 12.16 disables TLS certificate verification, allowing on-path attackers to perform man-in-the-middle attacks to intercept API keys and tamper with traffic.