code16/sharp

Composer · Package

10 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
code16/sharp: Server-side request forgery through an unanchored autocomplete endpoint checkCVE-2026-84987 · GHSA-G6F8-C3X9-JV7F	code16/sharp	Composer	Medium	Fix reported	2026-11-12
code16/sharp: Arbitrary class instantiation through the embed_key API parameterCVE-2026-84974 · GHSA-H24V-F482-8CWF	code16/sharp	Composer	Medium	Fix reported	2026-11-12
code16 Sharp vulnerable to stored XSS via iframe srcdoc AttributeCVE-2026-61823 · GHSA-QXG3-46RW-79J8	code16/sharp	Composer	High	Fix reported	2026-09-25
code16/sharp has a stored XSS via data-html-content Sanitizer BypassCVE-2026-61825 · GHSA-VJ3Q-VP3G-J9C8	code16/sharp	Composer	High	Fix reported	2026-09-25
Authenticated Sharp users can download unrelated Laravel Storage objects through the generic download endpointCVE-2026-44692 · GHSA-748W-HM6R-QC7V	code16/sharp	Composer	High	Fix reported	2026-09-10
Sharp Missing Authorization Check in Quick Creation Command EndpointsCVE-2026-53634 · GHSA-VMWX-M75V-QVCH	code16/sharp	Composer	Medium	Fix reported	2026-07-09
Sharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtilCVE-2026-33686 · GHSA-9FFQ-6457-8958	code16/sharp	Composer	High	Fix reported	2026-03-28
Sharp has Unrestricted File Upload via Client-Controlled Validation RulesCVE-2026-33687 · GHSA-FR76-5637-W3G9	code16/sharp	Composer	High	Fix reported	2026-03-28
Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntaxCVE-2025-62798 · GHSA-9F58-4465-23C7	code16/sharp	Composer	Medium	Fix reported	2025-10-29
code16 Sharp vulnerable to Cross Site Scripting (XSS)CVE-2025-61457 · GHSA-9778-V769-QVJF	code16/sharp	Composer	Medium	Fix reported	2025-10-22