october/rain
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Reliance on Cookies without validation in OctoberCMS | october/rain | Composer | Medium | Fix reported | |
| October Rain has Stored XSS via SVG Filter Bypass | october/rain | Composer | Medium | Fix reported | |
| October Rain has Environment Variable Exfiltration via INI Parser Interpolation | october/rain | Composer | Medium | Fix reported | |
| October Rain has a Twig Sandbox Bypass via Collection Methods | october/rain | Composer | Medium | Fix reported | |
| OctoberCMS Cross-Site Scripting | october/rain | Composer | Medium | Fix reported | |
| October CMS Session ID not invalidated after logout | october/rain | Composer | Critical | Fix reported |