wintercms/winter
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Winter CMS Server-Side Template Injection (SSTI) vulnerability | wintercms/winter | Composer | High | No fix reported | |
| Winter CMS stored XSS through privileged upload of SVG file | wintercms/winter | Composer | Low | Fix reported | |
| Bypass of CMS Safe Mode Security Feature | wintercms/winter | Composer | Medium | Fix reported | |
| Prototype pollution in Snowboard framework | wintercms/winter | Composer | High | Fix reported |