Packagist · Idno/Known · CVE-2022-33011
**Name of the Vulnerable Software and Affected Versions**
Known versions 1.3.1 and prior
**Description**
The issue allows attackers to perform an account takeover via a host header injection attack.
**Recommendations**
For versions 1.3.1 and prior, consider restricting access to sensitive account information until a patch is available.
As a temporary workaround, consider implementing additional validation on the host header to prevent injection attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.