easycorp/easyadminbundle Security Advisories | GitStock

high2026-09-02

EasyAdmin custom-action dispatcher bypasses access_control on other routes

GHSA-g2fm-8hr4-j82h · CVE-2026-81892

high2026-07-14

EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField

GHSA-8559-gwj3-q37r · CVE-2026-54087

medium2026-07-01

EasyAdminBundle has path traversal and reflected XSS in Flag and Icon Twig components

GHSA-2wwr-9x6f-88gp