AIKIDO-2025-10519
globalpayments/php-sdk is vulnerable to Insertion of Sensitive Information into Log File
20
Low Risk
This Affects:
globalpayments/php-sdkTL;DR
Affected versions may inadvertently log sensitive information when using certain terminal loggers. This can result in the exposure of confidential data such as credentials, tokens, or personally identifiable information in logs, posing a security and compliance risk, especially in shared or production environments.
Who does this affect?
You are affected if you use the globalpayments/php-sdk package.
Background info
globalpayments/php-sdk is vulnerable to Insertion of Sensitive Information into Log File in versions 1.0.0 - 13.3.2.
How to fix this
Upgrade globalpayments/php-sdk to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant