Medium
ghsa-5cwr-5jxg-pcf6
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,039
Reset filters
High
ghsa-fm29-4mq3-phg6
Winter: ImportExportController AJAX handlers bypass granular import/export permission gate
Medium
ghsa-mpmw-f6h6-3g26
Winter: My Account preview exposes another backend user's profile by record ID
Low
ghsa-7mpf-4465-7fc2
Winter: Stored XSS through Backend List widget image columns
High
CVE-2026-79774
Winter: Authenticated Twig sandbox escape in CMS SecurityPolicy (bypass of CVE-2024-54149)
Medium
CVE-2026-79773
Winter: Local File Inclusion through =include directives in JavaScript asset compilation
Medium
CVE-2026-63179
Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets
Medium
CVE-2026-57570
Laravel Backpack CRUD: HasMany/MorphMany relation fields allow cross-tenant record re-parenting (IDOR) via attachManyRelation
Medium
CVE-2026-54256
Winter: Authenticated IDOR in backend FileUpload widget allows cross-user access to attachment metadata
High
CVE-2026-54182
Laravel Backpack CRUD: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth)
Medium
CVE-2026-54181
Laravel Backpack CRUD: Stored XSS in the color column — the `@if($column['escaped'])` branches are inverted
High
CVE-2026-54180
Laravel Backpack CRUD: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR)
Medium
CVE-2026-54179
Laravel Backpack CRUD: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk
High
CVE-2026-54178
Laravel Backpack CRUD: Arbitrary file deletion via attacker-controlled clear_<attr>[] in HasUploadFields::uploadMultipleFilesToDisk
Medium
CVE-2026-54177
Laravel Backpack CRUD: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of `shell.php` reach the webserver
Medium
CVE-2026-54176
Laravel Backpack CRUD: MyAccountController allows changing the login email without a current-password check
High
CVE-2026-54175
Laravel Backpack CRUD: Unverified password change in MyAccountController via mass assignment
High
CVE-2026-62230
Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems
Medium
CVE-2026-61807
Snipe-IT: Stored DOM XSS via table selected-count IDs
Medium
CVE-2026-55703
Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET
High
CVE-2026-55694
Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover
High
CVE-2026-55643
Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode
High
CVE-2026-53965
MCP PHP SDK: client HttpTransport SSE buffer (sseBuffer .= chunk) grows unbounded when server withholds the event delimiter
Unrated
CVE-2026-76759
drupal/screenshot - SA-CONTRIB-2026-102
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.