CVE-2026-121589 | spatie url-signer up to 2.1.3 URL Validation AbstractUrlSigner.php validate expires type conversion

A vulnerability classified as problematic has been found in spatie url-signer up to 2.1.3. Affected is the function AbstractUrlSigner::validate of the file AbstractUrlSigner.php of the component URL Validation. This manipulation of the argument expires causes incorrect type conversion.

The identification of this vulnerability is CVE-2026-121589. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More