neos/flow
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| TYPO3 Flow Cross-site scripting (XSS) vulnerability | neos/flowtypo3/flow | Composer | Medium | Fix reported | |
| Neos Flow Information disclosure in entity security | neos/flow | Composer | Medium | Fix reported | |
| Time-Based Information Disclosure Vulnerability in Flow | neos/flow | Composer | Medium | Fix reported | |
| Neos Flow Arbitrary file upload and XML External Entity processing | neos/flow | Composer | Medium | Fix reported | |
| Insecure deserialize Vulnerability in FLOW3 | neos/flow | Composer | Low | Fix reported | |
| Unauthenticated arbitrary file upload / potential RCE | neos/flow | Composer | Unknown | No fix reported |