All products

kunstmaan/media-bundle

Composer · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code executionCVE-2026-104890 · GHSA-P279-5WCV-45VQ kunstmaan/bundles-cmskunstmaan/media-bundle Composer High Fix reported