Advisories for Composer/Phpfastcache/Phpfastcache package

PhpFastCache is a high-performance backend cache system (packagist package phpfastcache/phpfastcache). the phpinfo() can be exposed if the /vendor is not protected from public access. This is a rare situation today since the vendor directory is often located outside the web directory or protected via server rule (.htaccess, etc).

In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver.