ibexa/core
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Login timing attack in ibexa/core | ibexa/core | Composer | Critical | Fix reported | |
| Ibexa DXP Download route allows filename change | ibexa/core | Composer | Low | Fix reported | |
| Ibexa DXP users with the Company admin role can assign any role to any user | ibexa/core | Composer | Critical | Fix reported | |
| Object state limitation has no effect | ibexa/core | Composer | Critical | Fix reported | |
| Ibexa Kernel's files with blacklisted extensions can be still saved to drafts | ibexa/core | Composer | Medium | Fix reported |