Locutus: Security Vulnerabilities
The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service (ReDoS) via the gopher_parsedir function.
CVSS Score
5.3
EPSS Score
0.004
Published
2021-06-08
Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.
CVSS Score
9.8
EPSS Score
0.017
Published
2020-09-01
php/exec/escapeshellarg in Locutus PHP through 2.0.11 allows an attacker to achieve code execution.
CVSS Score
9.8
EPSS Score
0.012
Published
2020-07-01