automad/automad
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Automad has Broken Access Control: Unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint | automad/automad | Composer | High | Fix reported | |
| Automad arbitrary file upload vulnerability | automad/automad | Composer | High | Fix reported | |
| Cross-Site Request Forgery (CSRF) in automad/automad | automad/automad | Composer | Medium | Fix reported | |
| Authenticated Blind SSRF in automad/automad | automad/automad | Composer | Low | No fix reported | |
| Cross site scripting in automad/automad | automad/automad | Composer | Medium | Fix reported |