Security
فارسی
All products

cockpit-hq/cockpit

Composer · Package
26 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Cockpit CMS: Stored cross-site scripting vulnerability in the Set field type's Display template optionCVE-2026-23695 · GHSA-CH4J-VCF5-58X5 cockpit-hq/cockpit Composer Medium No fix reported
Cockpit Vulnerable to Unrestricted Upload of File with Dangerous TypeCVE-2026-38991 · GHSA-J2RX-4JG9-79MW cockpit-hq/cockpit Composer High Fix reported
Cockpit is vulnerable to directory traversalCVE-2026-38993 · GHSA-P46P-7PMJ-M34F cockpit-hq/cockpit Composer Medium Fix reported
Cockpit is vulnerable to arbitrary code executionCVE-2026-38992 · GHSA-FM6C-RHCF-7439 cockpit-hq/cockpit Composer Critical Fix reported
Cockpit has NoSQL Injection Through Content Aggregation PipelinesCVE-2026-6626 · GHSA-5PV2-86QJ-5JF9 cockpit-hq/cockpit Composer Low Fix reported
Cockpit CMS Cross-Site Scripting vulnerabilityCVE-2024-2001 · GHSA-Q76R-7P4Q-MQPW cockpit-hq/cockpit Composer Medium No fix reported
Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw() CVE-2026-31891 · GHSA-7X5C-VFHJ-9628 cockpit-hq/cockpit Composer High Fix reported
Cockpit - Content Platform vulnerable to XSS through name or email argument namesCVE-2025-7053 · GHSA-J4RJ-FGCQ-WMQP cockpit-hq/cockpit Composer Medium Fix reported
Cockpit Arbitrary File UploadCVE-2025-1025 · GHSA-WP68-XRFG-XVQ4 cockpit-hq/cockpit Composer High Fix reported
Cockpit CMS vulnerable to incorrect access controlCVE-2023-37649 · GHSA-9R25-4J77-9WC7 cockpit-hq/cockpit Composer High Fix reported
Cockpit CMS contains an arbitrary file upload vulenrabilityCVE-2024-4825 · GHSA-VPJ8-XFQC-JCV9 cockpit-hq/cockpit Composer Critical Fix reported
Cockpit CMS Cross-Site Request Forgery vulnerabilityCVE-2023-37650 · GHSA-45G2-R339-PJWF cockpit-hq/cockpit Composer High Fix reported
Cockpit PHP Remote File Inclusion vulnerabilityCVE-2023-4195 · GHSA-XCQ3-7PF3-5JVC cockpit-hq/cockpit Composer Critical Fix reported
Cockpit Cross-site Scripting vulnerabilityCVE-2023-4422 · GHSA-8M65-QQ6G-43RR cockpit-hq/cockpit Composer Medium Fix reported
Cockpit CMS arbitrary file upload vulnerabilityCVE-2023-41564 · GHSA-38VF-35CG-M73W cockpit-hq/cockpit Composer Medium No fix reported
Cockpit Cross-site Scripting vulnerabilityCVE-2023-4451 · GHSA-G3MV-64H3-H482 cockpit-hq/cockpit Composer Medium No fix reported
Cockpit Cross-site Scripting vulnerabilityCVE-2023-4433 · GHSA-FF45-2JP9-69JC cockpit-hq/cockpit Composer High No fix reported
Cockpit Cross-site Scripting vulnerabilityCVE-2023-4196 · GHSA-W3QM-93VF-5HRW cockpit-hq/cockpit Composer High Fix reported
Cockpit Cross-site Scripting vulnerabilityCVE-2023-4321 · GHSA-3VF5-XM2P-6MH5 cockpit-hq/cockpit Composer High No fix reported
Cockpit Content Platform vulnerable to 2FA bypassCVE-2022-2818 · GHSA-8WJ3-CPMR-8WHP cockpit-hq/cockpit Composer High Fix reported