laravel-internationalization-and-translation
Fail
Audited by Snyk on Feb 16, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E006: Malicious code pattern detected in skill scripts.
- Malicious code pattern detected (high risk: 1.00). The guide is mostly benign i18n examples but contains a critical vulnerability: TranslationController accepts an unvalidated locale parameter and uses include() on files under lang_path(), enabling local file inclusion and potential disclosure/exfiltration of sensitive PHP config/data (and caching of those secrets), which is a high-risk flaw.
Audit Metadata