Security advisories

medium2024-05-30

Twig Path Traversal vulnerability in the filesystem loader

twigphp/twig · GHSA-7cvr-xhm5-x998

critical2024-05-30

titon/framework vulnerable to Remote Code Execution via Chosen-Ciphertext Attack

titon/framework · GHSA-q3jm-v27q-jfww

high2024-05-30

Thelia authentication bypass vulnerability

thelia/thelia · GHSA-g8pg-33v4-9r96

medium2024-05-30

Thelia BackOffice default template vulnerable to Cross-site Scripting

thelia-templates/back · GHSA-pp7v-wxx9-hm6r

medium2024-05-30

Thelia Cross-site Scripting vulnerability in BackOffice

thelia/thelia · GHSA-vq4j-qcx7-ppc6

high2024-05-30

symfony/validator XML Entity Expansion vulnerability

symfony/validator · GHSA-4vf2-qfg3-7598

high2024-05-30

symfony/translation XML Entity Expansion vulnerability

symfony/translation · GHSA-f75p-x5vm-83qp

medium2024-05-30

Symfony2 improper IP based access control

symfony/symfony · GHSA-hx53-jchx-cr52

high2024-05-30

Symfony XML Entity Expansion security vulnerability

symfony/symfony · GHSA-q2gc-gg3x-7942

critical2024-05-30

Symfony XML decoding attack vector through external entities

symfony/symfony · GHSA-mmcv-fvq8-r9x3

medium2024-05-30

Symfony may allow a user to switch to using another user's identity

symfony/symfony · GHSA-7mx2-7q8p-pgmw

critical2024-05-30

Symfony XML decoding attack vector through external entities

symfony/serializer · GHSA-j68w-pg49-f6vx

high2024-05-30

Symfony XXE security vulnerability

symfony/routing · GHSA-rjpm-qmq7-q85w

high2024-05-29

Symfony XML Entity Expansion security vulnerability

symfony/dependency-injection · GHSA-c636-cg5r-2498

medium2024-05-29

symbiote/silverstripe-multivaluefield Possible PHP Object Injection via Multi-Value Field Extension

symbiote/silverstripe-multivaluefield · GHSA-g5vj-wj9x-4jg9

medium2024-05-29

Sylius Admin Bundle Cross-Site Request Forgery vulnerability

sylius/syliusadminbundle · GHSA-945h-6vcv-pc8h

medium2024-05-29

Sylius Resource Bundle Cross-Site Request Forgery vulnerability

sylius/syliusresourcebundle · GHSA-65v7-wg35-2qpm

high2024-05-29

CVE-2024-35226-Smarty vulnerable to PHP Code Injection by malicious attribute in extends-tag

smarty-php/smarty · GHSA-4rmg-292m-wg3w

medium2024-05-29

CVE-2024-36112-Nautobot dynamic-group-members doesn't enforce permission restrictions on member objects

nautobot/nautobot · GHSA-qmjf-wc2h-6x3q

medium2024-05-29

CVE-2024-36107-MinIO information disclosure vulnerability

minio/minio · GHSA-95fr-cm4m-q5p9