Executive brief
Saloon has insecure deserialization in AccessTokenAuthenticator
Affected products
- Packagist saloonphp/saloon
Junglewise Threat Intelligence
CVE-2026-33942: Saloon has insecure deserialization in AccessTokenAuthenticator
CVE-2026-33942 · Severity: medium · CVSS 4 · Published 2026-03-27
Technologies: saloonphp/saloon (Packagist). Vendors: Packagist.