Composer · packagist.org
daycry/auth
Php Assert String Exec: assert() called with a variable — PHP's deprecated string-exec backdoor.
Why PkgRadar flagged v5.4.2
| Severity | Signal | Evidence |
|---|---|---|
| high | Php Assert String Exec | assert() called with a variable — PHP's deprecated string-exec backdoor. · daycry-auth-74501b6/src/Views/webauthn_2fa_verify.php |
Scanned versions
| Version | Verdict | Score | Scanned (UTC) |
|---|---|---|---|
v5.4.2 | High risk | 22 | 2026-06-06 |
v5.4.1 | High risk | 22 | 2026-06-06 |
Related campaigns
- php_assert_string_exec:assert() called with a variable — php's deprecated string-exec backdoor. — 14 releases, max score 120
Block this in CI
pkgradar gate --ecosystem composer daycry/[email protected]