Contao: Path traversal in the images controller
CVE-2026-107844
`ImagesController` joins the user controlled `{path}` onto the configured image target directory with `Path::join()`, wh
#composer
共收录 517 条相关情报。
← 返回所有主题Contao: Cross-site scripting in the comments bundle
CVE-2026-107845
An unauthenticated front end visitor can post a comment containing a XSS injection. The victim is any back end user who
Contao: Improper access control in the preview links module
CVE-2026-107850
`core-bundle/config/services.yaml` registers the preview access voter with the class `Contao\CoreBundle\Security\Voter\D
Contao: Improper access control in the table access voter
CVE-2026-107851
Due to a caching defect in the security voter that governs table-level access to Contao's Data Container (DCA) backend,
Filament: Multi-factor authentication (app) management actions do not require password reauthentication
CVE-2026-104181
App-based multi-factor authentication management actions did not consistently require the user to confirm their current
MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs
CVE-2026-88023
### Impact Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB PHP Li
Composer: GHSA-gjfg-22fp-rrxx fix bypass via symlinked package bin path
CVE-2026-59944
## Summary A malicious or compromised Composer package could, when installed as a dependency, cause Composer to change
Laravel: XSS in Debug Page Information
CVE-2026-102279
### Impact When `APP_DEBUG=true`, attacker-controlled input is passed to a Tippy.js tooltip configured with `allowHTML:
Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module
CVE-2026-57232
### Summary The Feed Reader front-end module passes RSS feed URLs from its configuration directly to `$this->feedIo->re
zbateson/mail-mime-parser has CRLF header injection via attachment filename
CVE-2026-61815
### Impact A CRLF (carriage-return / line-feed) header injection affecting any application that uses this library to b
zbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIME
CVE-2026-61816
### Impact An uncontrolled resource consumption / algorithmic complexity vulnerability affecting any application that p
phpMyFAQ has SQL Injection in `StopWords::add()` — Unescaped Stop Word Insertion
CVE-2026-56738
## Summary The `StopWords::add()` method in phpMyFAQ builds a SQL `INSERT` statement using `sprintf()` and inserts the
phpMyFAQ's two-factor authentication login bypasses the password factor
CVE-2026-56737
### Summary The public two-factor verification endpoint `POST /check` logs a user in based **solely** on a valid 6-digit
phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission
CVE-2026-56736
### Summary A stored cross-site scripting (XSS) vulnerability in phpMyFAQ allows any unauthenticated user (or low-privil
Formie: Missing authorization on sent notification resend modal exposes submission PII
CVE-2026-76089
### Impact The control panel action `formie/sent-notifications/get-resend-modal-content` (`SentNotificationsController:
Formie: Unauthenticated users can overwrite incomplete submissions via submit action
CVE-2026-76087
### Impact The anonymous front-end action `formie/submissions/submit` (`SubmissionsController::actionSubmit`) trusted a
Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentials
CVE-2026-76086
### Impact The control panel action `formie/integrations/form-settings` (`IntegrationsController::actionFormSettings`)
Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)
CVE-2026-92692
### Impact An unauthenticated JCR-SQL2 injection exists in the Smart Content category filter of the 2.x content query b
Solspace Freeform: Limited Twig template injection via submitted field values
CVE-2026-73858
### Summary A limited server-side Twig template injection issue was identified in Solspace Freeform for Craft CMS. In a
Paymenter has a credit-refund double-spend race condition in service downgrade (doUpgrade)
CVE-2026-71537
### Summary The service downgrade implementation in `app/Livewire/Services/Upgrade.php::doUpgrade()` executes a prorati