What’s Vulnerable › Products

thephpleague flysystem vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your thephpleague flysystem version is affected

Latest thephpleague flysystem vulnerabilities

• CVE-2026-102601 — Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapter (CVSS 3.5)
• CVE-2021-32708 — Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem (CVSS 8.1)