1961 matches found
Exposure of sensitive information through a stale search index (see GHSA-x2rp-9qf7-2fmq)
More info at https://contao.org/en/security-advisories/exposure-of-sensitive-information-through-a-stale-search-index...
Cross-site scripting in the frontend search results (see GHSA-h57j-5f5m-789v)
More info at https://contao.org/en/security-advisories/cross-site-scripting-in-the-frontend-search-results...
Cross-site scripting in the comments bundle (see GHSA-628f-v4f6-p37r)
More info at https://contao.org/en/security-advisories/cross-site-scripting-in-the-comments-bundle...
Improper access control in the preview links module (see GHSA-q6wp-fr43-gm9v)
More info at https://contao.org/en/security-advisories/improper-access-control-in-the-preview-links-module...
Improper access control in the preview links module (see GHSA-q6wp-fr43-gm9v)
More info at https://contao.org/en/security-advisories/improper-access-control-in-the-preview-links-module...
Exponential and Quadratic Parse Times in the YAML Parser Let a Single Document Hold a Process
More info at https://github.com/symfony/symfony/security/advisories/GHSA-hwfg-qwvh-2wfx...
Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses: SSRF Filter Bypass
More info at https://github.com/symfony/symfony/security/advisories/GHSA-4qpf-57w4-m3wc...
XXE (Local File Read) in Config XmlUtils::parse() via validateOnParse = true
More info at https://github.com/symfony/symfony/security/advisories/GHSA-5jff-8h8q-r5qx...
Inline Fragments Let Untrusted Forwarded Headers Set the Host, Scheme and Port of the URLs Generated for the Main Request
More info at https://github.com/symfony/symfony/security/advisories/GHSA-wg5q-m2ww-f3c9...
Unbounded recursion in compressed object resolution
More info at https://github.com/PrinsFrank/pdfparser/security/advisories/GHSA-j946-cc6f-666c...
The "private_ranges" Trusted Proxies Shortcut Trusts Clients Presenting an IPv4-Mapped, 6to4, Teredo or NAT64 Address as Reverse Proxies
More info at https://github.com/symfony/symfony/security/advisories/GHSA-xg2q-4rrq-657q...
Generated URLs Can Point to a Host Chosen by the Client
More info at https://github.com/symfony/symfony/security/advisories/GHSA-5mx8-mwrp-5693...
Path Rules Enforced in Front of PHP Can Be Bypassed by Appending the Path to the Script Name
More info at https://github.com/symfony/symfony/security/advisories/GHSA-3h27-hjv7-fqjx...
DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server File
More info at https://github.com/symfony/symfony/security/advisories/GHSA-pxj9-jh84-vhm5...
ObjectNormalizer Dotted-Key Property-Path Traversal Bypasses #[Ignore] on Nested Objects
More info at https://github.com/symfony/symfony/security/advisories/GHSA-hqp2-7rr8-hf26...
HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypass
More info at https://github.com/symfony/symfony/security/advisories/GHSA-q8jq-xrf4-v5j8...
Programmatic Logins Skip the checkPostAuth() Method of User Checkers
More info at https://github.com/symfony/symfony/security/advisories/GHSA-8f57-m8wj-x65w...
HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar: Incomplete Fix for CVE-2026-48761
More info at https://github.com/symfony/symfony/security/advisories/GHSA-wm2w-4mgj-vw33...
Programmatic Logins Skip the checkPostAuth() Method of User Checkers
More info at https://github.com/symfony/symfony/security/advisories/GHSA-8f57-m8wj-x65w...
HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar: Incomplete Fix for CVE-2026-48761
More info at https://github.com/symfony/symfony/security/advisories/GHSA-wm2w-4mgj-vw33...
XXE (Local File Read) in Config XmlUtils::parse() via validateOnParse = true
More info at https://github.com/symfony/symfony/security/advisories/GHSA-5jff-8h8q-r5qx...
Filesystem Path Treats Any Prefix Before "://" as a Root, Letting Paths Escape Their Base Directory
More info at https://github.com/symfony/symfony/security/advisories/GHSA-6prc-h956-hxjq...
DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server File
More info at https://github.com/symfony/symfony/security/advisories/GHSA-pxj9-jh84-vhm5...
ObjectNormalizer Dotted-Key Property-Path Traversal Bypasses #[Ignore] on Nested Objects
More info at https://github.com/symfony/symfony/security/advisories/GHSA-hqp2-7rr8-hf26...
NoPrivateNetworkHttpClient Does Not Pin the Checked IP of Cached Hosts, Letting DNS Rebinding Enumerate Internal Ports: Incomplete Fix for CVE-2024-50342
More info at https://github.com/symfony/symfony/security/advisories/GHSA-c7hm-wqwp-f9v8...
Cross-site scripting in the figure insert tag (see GHSA-pc2r-hvrc-f4v6)
More info at https://github.com/contao/contao/security/advisories/GHSA-pc2r-hvrc-f4v6...
NoPrivateNetworkExceptRootPagesHttpClient does not pin the checked IP of cached hosts (see GHSA-wvj5-rchg-986m)
More info at https://github.com/contao/contao/security/advisories/GHSA-wvj5-rchg-986m...
Server-side request forgery via unvalidated feed URL in the legacy RSS reader module (see GHSA-4mx5-xq7q-77cm)
More info at https://github.com/contao/contao/security/advisories/GHSA-4mx5-xq7q-77cm...
Contao crawler leaks confidental headers (see GHSA-26h3-f97j-vj85)
More info at https://github.com/contao/contao/security/advisories/GHSA-26h3-f97j-vj85...
Filemount access-control bypass in DC_Folder::editAll (see GHSA-9jfh-v443-w3fj)
More info at https://github.com/contao/contao/security/advisories/GHSA-9jfh-v443-w3fj...
Insufficient scope validation for passkey authentication (see GHSA-5mw8-wv8h-h6hx)
More info at https://github.com/contao/contao/security/advisories/GHSA-5mw8-wv8h-h6hx...
Path traversal via decode-after-check in the image insert tag (see GHSA-r7cf-mfp4-r23h)
More info at https://github.com/contao/contao/security/advisories/GHSA-r7cf-mfp4-r23h...
Stored cross-site scripting in the file manager via crafted filenames (see GHSA-xh3r-77ch-frm3)
More info at https://github.com/contao/contao/security/advisories/GHSA-xh3r-77ch-frm3...
Insert tag injection in the breadcrumb module on 404 pages (see GHSA-6m74-9w88-r3fh)
More info at https://github.com/contao/contao/security/advisories/GHSA-6m74-9w88-r3fh...
Session invalidation upon enabling or disabling 2FA (see GHSA-5mg3-mv6j-57wc)
More info at https://github.com/contao/contao/security/advisories/GHSA-5mg3-mv6j-57wc...
Filemount access-control bypass in DC_Folder::editAll (see GHSA-9jfh-v443-w3fj)
More info at https://github.com/contao/contao/security/advisories/GHSA-9jfh-v443-w3fj...
Insert tag injection in the breadcrumb module on 404 pages (see GHSA-6m74-9w88-r3fh)
More info at https://github.com/contao/contao/security/advisories/GHSA-6m74-9w88-r3fh...
Session invalidation upon enabling or disabling 2FA (see GHSA-5mg3-mv6j-57wc)
More info at https://github.com/contao/contao/security/advisories/GHSA-5mg3-mv6j-57wc...
phpseclib unbounded PBKDF iteration count in encrypted key/PFX/CMS parsing enables CPU-exhaustion DoS
More info at https://github.com/phpseclib/phpseclib/security/advisories/GHSA-w3p9-g4p2-h3rr...
Unauthenticated access to other customers' order confirmation page through the pixel test controller
I would like to report a potential vulnerability, but no security policy is available. Should I just create an issue - potentially exposing the vulnerability to the public?...
Improper access control in the newsletter module (see GHSA-3r9g-pfhv-3228)
More info at https://contao.org/en/security-advisories/improper-access-control-in-the-newsletter-module...
Improper access control in the CSV import wizard (see GHSA-23w9-4pg3-xwm3)
More info at https://contao.org/en/security-advisories/improper-access-control-in-the-csv-import-wizard...
Path traversal in the images controller (see GHSA-mrvp-7wmx-5m4h)
More info at https://contao.org/en/security-advisories/path-traversal-in-the-images-controller...
Cross-site scripting in the comments bundle (see GHSA-628f-v4f6-p37r)
More info at https://contao.org/en/security-advisories/cross-site-scripting-in-the-comments-bundle...
Non-admin users can self-grant permissions that implicitly make them administrators (see GHSA-r9qp-pqx5-8369)
More info at https://contao.org/en/security-advisories/non-admin-users-can-self-grant-permissions-that-implicitly-make-them-administrators...
Cross-site request forgery in custom backend actions (see GHSA-9ff2-p842-45wq)
More info at https://contao.org/en/security-advisories/cross-site-request-forgery-in-custom-backend-actions...
Path traversal in the images controller (see GHSA-mrvp-7wmx-5m4h)
More info at https://contao.org/en/security-advisories/path-traversal-in-the-images-controller...
HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar: Incomplete Fix for CVE-2026-48761
More info at https://github.com/symfony/symfony/security/advisories/GHSA-wm2w-4mgj-vw33...
NoPrivateNetworkHttpClient Does Not Pin the Checked IP of Cached Hosts, Letting DNS Rebinding Enumerate Internal Ports: Incomplete Fix for CVE-2024-50342
More info at https://github.com/symfony/symfony/security/advisories/GHSA-c7hm-wqwp-f9v8...