All products

craftcms/craft

Composer · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Craft CMS: save_images_Asset graphql mutation can be abused to exfiltrate AWS credentials of underlying hostCVE-2026-25492 · GHSA-96PQ-HXPW-RGH8 craftcms/craft Composer Medium Fix reported