Skip to content

thephpleague flysystem

CVE-2026-102601 Low 3.5 Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapter 0.3%
CVE-2021-32708 Critical 9.8 Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem 3.5%