packagist package report

Is pear/auth safe?

1 known vulnerability, worst severity HIGH.

cvss

7.5

how bad it is if exploited, out of 10

epss

2.5%

chance of exploitation in the next 30 days

xyz score

3.4

CyberXYZ composite, out of 10

fig. 01 — GHSA-76rh-xv36-9mrc, the advisory selected below

// advisories

GHSA-76rh-xv36-9mrc

HIGHCVE-2006-0868

Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."

Affected: < 1.2.4, >= 1.3.0r1, < 1.3.0r4
Fixed in: 1.2.4
Published: 2022-05-01
Source: github

GHSA NVD MITRE reference reference reference reference reference reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so packagist packages are not covered.

Checked 2026-09-22 at 01:45 UTC. The most recent advisory here was published 2022-05-01. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is pear/auth safe? packagist package security report | CyberXYZ