october/backend
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Stored XSS in October | october/backend | Composer | Low | Fix reported | |
| Potential CSV Injection vector in OctoberCMS | october/backend | Composer | Medium | Fix reported | |
| October CMS vulnerable to Potential Host Header Poisoning on misconfigured servers | october/backend | Composer | Low | Fix reported | |
| Reflected XSS when importing CSV in OctoberCMS | october/backend | Composer | Medium | Fix reported | |
| Privilege escalation by backend users assigned to the default "Publisher" system role | october/backend | Composer | Low | Fix reported | |
| Stored XSS by authenticated backend user with access to upload files | october/backend | Composer | Low | Fix reported | |
| Cross-site Scripting in October | october/backend | Composer | Low | Fix reported |