Packagist

GHSA-x2rp-9qf7-2fmq

Packagist/contao/core-bundle

Contao: Protected page content is disclosed to anonymous visitors after... 2 days ago

Fix available
Severity - 5.3 (Medium)

GHSA-mfxh-vp55-7gc6

Packagist/contao/core-bundle

Contao: The registration module re-sends activation mails 2 days ago

Fix available
Severity - 5.3 (Medium)

GHSA-9ff2-p842-45wq

Packagist/contao/core-bundle

Contao: Cross-site request forgery in custom backend actions 2 days ago

Fix available
Severity - 3.5 (Low)

GHSA-mrvp-7wmx-5m4h

Packagist/contao/core-bundle

Contao: Path traversal in the images controller 2 days ago

Fix available
Severity - 5.3 (Medium)

GHSA-628f-v4f6-p37r

Packagist/contao/comments-bundle

Contao: Cross-site scripting in the comments bundle 2 days ago

Fix available
Severity - 9.3 (Critical)

GHSA-q6wp-fr43-gm9v

Packagist/contao/core-bundle

Contao: Improper access control in the preview links module 2 days ago

Fix available
Severity - 4.3 (Medium)

GHSA-5974-gfqc-wrcm

Packagist/contao/core-bundle

Contao: Improper access control in the table access voter 2 days ago

Fix available
Severity - 4.3 (Medium)

GHSA-9rjx-3jch-6vjf

Packagist/enshrined/svg-sanitize

enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character... 3 days ago

Fix available
Severity - 5.4 (Medium)

GHSA-m9xh-6747-9r6f

Packagist/enshrined/svg-sanitize

svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in... 3 days ago

Fix available
Severity - 6.5 (Medium)

GHSA-v383-3rw5-q8rf

Packagist/enshrined/svg-sanitize

enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash 3 days ago

Fix available
Severity - 6.5 (Medium)

GHSA-p279-5wcv-45vq

Packagist/kunstmaan/bundles-cms
Packagist/kunstmaan/media-bundle

Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated... 4 days ago

Fix available
Severity - 7.2 (High)

DRUPAL-CONTRIB-2026-217

Packagist:https://packages.drupal.org/8/drupal/advanced_filesystem

Advanced File System turns Drupal's file storage into a manageable, observable... 4 days ago

Fix available

DRUPAL-CONTRIB-2026-216

Packagist:https://packages.drupal.org/8/drupal/restrict_route_by_ip

This module enables you to restrict access to routes by IP address. The module... 4 days ago

Fix available

DRUPAL-CONTRIB-2026-215

Packagist:https://packages.drupal.org/8/drupal/examples

The Examples for Developers project aims to provide high-quality,... 4 days ago

Fix available

DRUPAL-CONTRIB-2026-214

Packagist:https://packages.drupal.org/8/drupal/permissions_by_term

This module enables you to restrict view access to single nodes via taxonomy... 4 days ago

Fix available

DRUPAL-CONTRIB-2026-213

Packagist:https://packages.drupal.org/8/drupal/freelinking

This module enables you to configure a WIKI-like input filter that allows users... 4 days ago

Fix available

Vulnerabilities