[HIGH] Insecure default secret key and IV allowing anyone to decrypt values

PKSA-ngdb-bty3-d9ns GHSA-r2r8-36pq-27cm

Affected package: nzo/url-encryptor-bundle

Affected version: >=5.0.0,<5.0.1|>=4.0.0,<4.3.2

Reported by:
GitHub, FriendsOfPHP/security-advisories