[CRITICAL] PHAR deserialization allowing remote code execution

PKSA-sdn5-dtyj-96rq CVE-2023-28115 GHSA-gq6w-q6wh-jggc

Affected package: knplabs/knp-snappy

Affected version: <1.4.2

Reported by:
GitHub, FriendsOfPHP/security-advisories