AAD parameter not correctly bound in File cryptography

PKSA-rpfb-zysg-cdwj

Affected package: paragonie/halite

Affected version: >=5,<5.1.5

Reported by:
FriendsOfPHP/security-advisories