An open redirect vulnerability exists in Rudloff/alltube that could let an attacker construct a URL within the application that causes redirection to an arbitrary external domain via Packagist in versions prior to 3.0.1.
View the template here CVE-2022-0692.yaml
References:
https://github.com/ARPSyndicate/cvemon