1961 matches found
CVE-2026-118514: HEAD Requests Bypass the methods Option of security.access_control Rules and Firewalls: Incomplete Fix for CVE-2026-45075
More info at https://symfony.com/cve-2026-118514...
TYPO3-EXT-SA-2026-037: Server-Side Request Forgery in extension "Mail" (mail)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-037...
TYPO3-EXT-SA-2026-037: Open Redirection in extension "Mail" (mail)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-037...
TYPO3-EXT-SA-2026-037: Cross-Site Scripting in extension "Mail" (mail)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-037...
TYPO3-EXT-SA-2026-037: Broken Access Control in extension "Mail" (mail)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-037...
EncryptedFieldsMapGenerator may silently omit encrypted fields when a document has embedded documents
More info at https://github.com/doctrine/mongodb-odm/security/advisories/GHSA-cr6x-45gj-q6f5...
CVE-2026-88991 - RCE in email subject field via template execution
More info at https://www.silverstripe.org/download/security-releases/cve-2026-88991...
CVE-2026-118515: The Serializer Builds UploadedFile Objects From Request Data, Letting a Client Point an Upload at Any Server File
More info at https://symfony.com/cve-2026-118515...
TYPO3-EXT-SA-2026-037: Information Disclosure in extension "Mail" (mail)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-037...
TYPO3-EXT-SA-2026-037: Broken Access Control in extension "Mail" (mail)
More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-037...
CVE-2026-88992 - Userforms CSV export restricted file access
More info at https://www.silverstripe.org/download/security-releases/cve-2026-88992...
SS-2026-003 - RCE via renamed uploaded file
More info at https://www.silverstripe.org/download/security-releases/ss-2026-003...
Promotion and coupon usage limit bypass via race condition
More info at https://github.com/Sylius/Sylius/security/advisories/GHSA-h76r-rr27-3gm4...
CVE-2026-118517: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority: Incomplete Fix for CVE-2026-45066
More info at https://symfony.com/cve-2026-118517...
CVE-2026-118516: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Control
More info at https://symfony.com/cve-2026-118516...
NoPrivateNetworkHttpClient Does Not Pin the Checked IP of Cached Hosts, Letting DNS Rebinding Enumerate Internal Ports: Incomplete Fix for CVE-2024-50342
More info at https://github.com/symfony/symfony/security/advisories/GHSA-c7hm-wqwp-f9v8...
SS-2026-006 - RCE via template string escaping in userforms email subject
More info at https://www.silverstripe.org/download/security-releases/ss-2026-006...
CVE-2026-91111 - Uploaded XML XSS
More info at https://www.silverstripe.org/download/security-releases/cve-2026-91111...
SS-2026-005 - XSS in required field label
More info at https://www.silverstripe.org/download/security-releases/ss-2026-005...
CVE-2026-91114 - Stored XSS via unescaped permission in PermissionCheckboxSetField
More info at https://www.silverstripe.org/download/security-releases/cve-2026-91114...
CVE-2026-91115 - RCE via i18nTextCollectorTask writer parameter
More info at https://www.silverstripe.org/download/security-releases/cve-2026-91115...
CVE-2026-91110 - XSS using control bytes
More info at https://www.silverstripe.org/download/security-releases/cve-2026-91110...
CVE-2026-91113 - User-controlled ClassName allows unauthorized record type change
More info at https://www.silverstripe.org/download/security-releases/cve-2026-91113...
CVE-2026-91112 - CMS_ACCESS_SecurityAdmin privilege escalation
More info at https://www.silverstripe.org/download/security-releases/cve-2026-91112...
SS-2026-004 - Password reset token account takeover
More info at https://www.silverstripe.org/download/security-releases/ss-2026-004...
CVE-2026-88987 - XSS via XHTML data URI
More info at https://www.silverstripe.org/download/security-releases/cve-2026-88987...
HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar: Incomplete Fix for CVE-2026-48761
More info at https://github.com/symfony/symfony/security/advisories/GHSA-wm2w-4mgj-vw33...
CVE-2026-100870: Administrator password-reset link is built from the request Host header, allowing reset-token theft
More info at https://github.com/Sylius/Sylius/security/advisories/GHSA-77w3-2367-7xvq...
CVE-2026-100871: JWT audience confusion allows shop customer to authenticate as administrator
More info at https://github.com/Sylius/Sylius/security/advisories/GHSA-f6mx-qxjc-55xf...
HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass
More info at https://github.com/symfony/symfony/security/advisories/GHSA-q8jq-xrf4-v5j8...
Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses: SSRF Filter Bypass
More info at https://github.com/symfony/symfony/security/advisories/GHSA-4qpf-57w4-m3wc...
XXE (Local File Read) in Config XmlUtils::parse() via validateOnParse = true
More info at https://github.com/symfony/symfony/security/advisories/GHSA-5jff-8h8q-r5qx...
Cross-site Scripting (XSS)
More info at https://security.snyk.io/vuln/SNYK-PHP-PATTERNLABDRUPALTWIGCOMPONENTS-8400872...
SS-2026-001 - Template injection RCE in userforms
More info at https://www.silverstripe.org/download/security-releases/ss-2026-001...
CVE-2026-88988 - XSS via SVG data URI
More info at https://www.silverstripe.org/download/security-releases/cve-2026-88988...
CVE-2026-88989 - Auth bypass GridFieldDetailForm
More info at https://www.silverstripe.org/download/security-releases/cve-2026-88989...
CVE-2026-88990 - RCE in email template field via template execution
More info at https://www.silverstripe.org/download/security-releases/cve-2026-88990...
Generated URLs Can Point to a Host Chosen by the Client
More info at https://github.com/symfony/symfony/security/advisories/GHSA-5mx8-mwrp-5693...
Cross-site Scripting (XSS)
More info at https://security.snyk.io/vuln/SNYK-PHP-DRUPALPATTERNLABUNIFIEDTWIGEXTENSIONS-8400877...
CVE-2026-100872: Order total can be inflated after a Payment Request has started a gateway transaction, marking the order fully paid
More info at https://github.com/Sylius/Sylius/security/advisories/GHSA-vv4h-q2x8-74g4...
Inline Fragments Let Untrusted Forwarded Headers Set the Host, Scheme and Port of the URLs Generated for the Main Request
More info at https://github.com/symfony/symfony/security/advisories/GHSA-wg5q-m2ww-f3c9...
ObjectNormalizer Dotted-Key Property-Path Traversal Bypasses #[Ignore] on Nested Objects
More info at https://github.com/symfony/symfony/security/advisories/GHSA-hqp2-7rr8-hf26...
The "private_ranges" Trusted Proxies Shortcut Trusts Clients Presenting an IPv4-Mapped, 6to4, Teredo or NAT64 Address as Reverse Proxies
More info at https://github.com/symfony/symfony/security/advisories/GHSA-xg2q-4rrq-657q...
Filesystem Path Treats Any Prefix Before "://" as a Root, Letting Paths Escape Their Base Directory
More info at https://github.com/symfony/symfony/security/advisories/GHSA-6prc-h956-hxjq...
Incomplete Fix for CVE-2026-45756: JsonPath Queries Can Still Hold a Process Through search(), match() and Chained Filters
More info at https://github.com/symfony/symfony/security/advisories/GHSA-cpww-5vpx-72x7...
Path Rules Enforced in Front of PHP Can Be Bypassed by Appending the Path to the Script Name
More info at https://github.com/symfony/symfony/security/advisories/GHSA-3h27-hjv7-fqjx...
Server-side Request Forgery (SSRF)
More info at https://security.snyk.io/vuln/SNYK-PHP-J0K3RHTTPLUGSSRFPLUGIN-8400871...
ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path References
More info at https://github.com/symfony/symfony/security/advisories/GHSA-gq53-v8w2-gjhj...