The str_rot_pass function in vendor/atholn1600/php-proxy/src/helpers.php in PHP-Proxy 5.1.0 uses weak cryptography, which makes it easier for attackers to calculate the authorization data needed for local file inclusion.Referenceshttps://github.com/eddietcc/CVE-Bins/blob/master/PHP-Proxy/readme.mdhttps://github.com/Athlon1600/php-proxy-app/issues/139