Skip to content
Threat Feed
Subscribe

Vendor

Spomky-Labs

1 brief RSS
medium advisory

spomky-labs/otphp Unbounded Digits Parameter Leads to Denial of Service

The spomky-labs/otphp library is vulnerable to a denial of service (GHSA-g7m4-839x-ch6v) where an unbounded 'digits' parameter in an otpauth provisioning URI causes a DivisionByZeroError, leading to unhandled fatal errors in applications trying to generate or verify OTPs.

otphp < 11.4.3 php denial-of-service vulnerability ghsa
2r 1t