Junglewise Threat Intelligence

spomky-labs/otphp: Unbounded digits parameter in a provisioning URI triggers an uncaught DivisionByZeroError in OTP generation

Severity: medium · CVSS 4 · Published 2026-06-18

Vendors: Packagist.

Executive brief

spomky-labs/otphp: Unbounded digits parameter in a provisioning URI triggers an uncaught DivisionByZeroError in OTP generation

Affected products

  • Packagist spomky-labs/otphp

Related threats