Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
Affects silverstripe/framework | Versions >=3.1.0, <3.1.17-rc2>=3.2.0, <3.2.2-rc2>=3.3.0-beta1, <3.3.0-rc3
Has fix
ComposerPublished 21 Jun 2026
- M
Access Control BypassCVE-2026-50886
Affects grumpydictator/firefly-iii | Versions >=0.0.0
Has fix
ComposerPublished 21 Jun 2026
Affects spatie/schema-org | Versions >=3.23.1, <3.23.2>=4.0.0, <4.0.2
Has fix
ComposerPublished 18 Jun 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-49209
Affects symfony/ux-live-component | Versions >=2.5.0, <2.36.0>=3.0.0, <3.1.0
Has fix
ComposerPublished 15 Jun 2026
- M
Cross-site Scripting (XSS)CVE-2026-49210
Affects symfony/ux-live-component | Versions >=2.8.0, <2.36.0>=3.0.0, <3.1.0
Has fix
ComposerPublished 15 Jun 2026
- C
Improper Verification of Cryptographic SignatureCVE-2026-49212
Affects symfony/ux-live-component | Versions >=2.8.0, <2.36.0>=3.0.0, <3.1.0
Has fix
ComposerPublished 15 Jun 2026
- L
Cross-site Request Forgery (CSRF)CVE-2026-49215
Affects symfony/ux-live-component | Versions >=2.22.0, <2.36.0>=3.0.0, <3.1.0
Has fix
ComposerPublished 15 Jun 2026
- L
Improper Validation of Unsafe Equivalence in InputCVE-2026-49208
Affects symfony/ux-live-component | Versions >=2.8.0, <2.36.0>=3.0.0, <3.1.0
Has fix
ComposerPublished 15 Jun 2026
- M
Missing AuthorizationCVE-2026-47349
Affects typo3/cms-core | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- H
Missing AuthorizationCVE-2026-11607
Affects typo3/cms-form | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- H
Missing AuthorizationCVE-2026-47343
Affects typo3/cms-core | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- M
Open RedirectCVE-2026-47347
Affects typo3/cms-core | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- H
Directory TraversalCVE-2026-49738
Affects typo3/cms-core | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- H
Directory TraversalCVE-2026-49742
Affects typo3/cms-filelist | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- H
Missing AuthorizationCVE-2026-49741
Affects typo3/cms-form | Versions >=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- C
Deserialization of Untrusted DataCVE-2026-49740
Affects typo3/cms-install | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- C
Deserialization of Untrusted DataCVE-2026-49740
Affects typo3/cms-frontend | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- C
Deserialization of Untrusted DataCVE-2026-49740
Affects typo3/cms-form | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- C
Deserialization of Untrusted DataCVE-2026-49740
Affects typo3/cms-extbase | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- C
Deserialization of Untrusted DataCVE-2026-49740
Affects typo3/cms-core | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- C
Deserialization of Untrusted DataCVE-2026-49740
Affects typo3/cms-scheduler | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- M
Cross-site Scripting (XSS)CVE-2026-47348
Affects typo3/cms-indexed-search | Versions >=13.0.0, <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- M
Missing AuthorizationCVE-2026-47350
Affects typo3/cms-core | Versions >=13.0.0, <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- H
Missing AuthorizationCVE-2026-47346
Affects typo3/cms-core | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- H
Missing AuthorizationCVE-2026-47346
Affects typo3/cms-form | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- M
Missing AuthorizationCVE-2026-47352
Affects typo3/cms-backend | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- M
Missing AuthorizationCVE-2026-47351
Affects typo3/cms-backend | Versions <13.4.31>=14.0.0, <14.3.3
Has fix
ComposerPublished 15 Jun 2026
- C
Arbitrary Code InjectionCVE-2026-54133
Affects mtdowling/jmespath.php | Versions <2.9.1
Has fix
ComposerPublished 14 Jun 2026
- M
Server-side Request Forgery (SSRF)CVE-2026-48998
Affects guzzlehttp/psr7 | Versions <2.10.2
Has fix
ComposerPublished 12 Jun 2026
- M
HTTP Response SplittingCVE-2026-49214
Affects guzzlehttp/psr7 | Versions <2.10.2
Has fix
ComposerPublished 12 Jun 2026