Security Issue

[altm4n]

Hi,
In fenom 2.12.1 and before ,there is a way to bypass sandbox to exec arbitrary php code when disable_native_funcs is true.

[WinterSilence]

GHSA-674v-3g2w-84gx

[yatlib]

Any updates?

[bzick]

I can't reproduce the issue. Seems a bullshit. Yes, fenom can call controlled eval, it's normal