Search by 
endroid/qr-code-bundle Security Advisories for 3.3.4 (1)
-
[MEDIUM] Disclosure of files via logo_path query parameter
PKSA-swh3-zyrm-86q1 GHSA-mvf6-3f2g-xfxf
Affected version: <3.4.2
Reported by:
FriendsOfPHP/security-advisories, GitHub