Security: statamic/cms
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Remote code execution via form uploadsGHSA-2r53-9295-3m86 published
Nov 14, 2023 by jasonvargaHigh -
Remote code execution via front-end form uploadsGHSA-72hg-5wr5-rmfc published
Nov 10, 2023 by jasonvargaHigh -
Antlers sanitizer cannot effectively sanitize malicious SVGGHSA-6r5g-cq4q-327g published
Jul 5, 2023 by jasonvargaModerate -
Discoverability of user password hash via REST APIGHSA-qcgx-7p5f-hxvr published
Mar 25, 2022 by jasonvargaLow