CVE-2022-31140

CVE-2022-31140 is a critical vulnerability affecting the Valinor PHP library (versions prior to 0.12.0) that allows sensitive information disclosure through improper error message handling. This flaw can expose details like SQL snippets, database credentials, or system specifics, potentially leading to data exfiltration or denial of service. With a CVSS score of 9.1 (Critical), it has a low attack complexity and no user interaction required, making it easily exploitable over the network. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion, suggesting a low immediate threat but a high potential impact if exploited.