Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/81033?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/81033?format=api", "purl": "pkg:composer/typo3/cms-core@13.1.1", "type": "composer", "namespace": "typo3", "name": "cms-core", "version": "13.1.1", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "13.4.23", "latest_non_vulnerable_version": "14.0.2", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/308775?format=api", "vulnerability_id": "VCID-arph-mg8d-47dx", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-59015", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00056", "scoring_system": "epss", "scoring_elements": "0.17695", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-59015" }, { "reference_url": "https://github.com/TYPO3-CMS/core", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core" }, { "reference_url": "https://github.com/TYPO3-CMS/core/commit/d2057cc7b2c2db417a2af38c30cb9da42302ab70", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core/commit/d2057cc7b2c2db417a2af38c30cb9da42302ab70" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59015", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-59015" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2025-019", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "6.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-09T19:31:01Z/" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2025-019" }, { "reference_url": "https://github.com/advisories/GHSA-p5jq-5383-qvc7", "reference_id": "GHSA-p5jq-5383-qvc7", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-p5jq-5383-qvc7" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/193590?format=api", "purl": "pkg:composer/typo3/cms-core@13.4.18", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-yr37-txrz-zbe2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.4.18" } ], "aliases": [ "CVE-2025-59015", "GHSA-p5jq-5383-qvc7" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-arph-mg8d-47dx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/301771?format=api", "vulnerability_id": "VCID-bwwk-hggs-t3cg", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47937", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00201", "scoring_system": "epss", "scoring_elements": "0.42112", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47937" }, { "reference_url": "https://github.com/TYPO3-CMS/core", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-x8pv-fgxp-8v3x", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-20T13:57:34Z/" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-x8pv-fgxp-8v3x" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47937", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47937" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2025-011", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-20T13:57:34Z/" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2025-011" }, { "reference_url": "https://github.com/advisories/GHSA-x8pv-fgxp-8v3x", "reference_id": "GHSA-x8pv-fgxp-8v3x", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-x8pv-fgxp-8v3x" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/196082?format=api", "purl": "pkg:composer/typo3/cms-core@13.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-arph-mg8d-47dx" }, { "vulnerability": "VCID-yr37-txrz-zbe2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.4.12" } ], "aliases": [ "CVE-2025-47937", "GHSA-x8pv-fgxp-8v3x" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bwwk-hggs-t3cg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/301773?format=api", "vulnerability_id": "VCID-jj8m-96su-jkek", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47939", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00129", "scoring_system": "epss", "scoring_elements": "0.31943", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47939" }, { "reference_url": "https://github.com/TYPO3-CMS/core", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core" }, { "reference_url": "https://github.com/TYPO3-CMS/core/commit/c265beed6e2c01817c534a226e80e593400f8255", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core/commit/c265beed6e2c01817c534a226e80e593400f8255" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-9hq9-cr36-4wpj", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-20T14:08:07Z/" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-9hq9-cr36-4wpj" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47939", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47939" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2025-014", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-20T14:08:07Z/" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2025-014" }, { "reference_url": "https://github.com/advisories/GHSA-9hq9-cr36-4wpj", "reference_id": "GHSA-9hq9-cr36-4wpj", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-9hq9-cr36-4wpj" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/196082?format=api", "purl": "pkg:composer/typo3/cms-core@13.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-arph-mg8d-47dx" }, { "vulnerability": "VCID-yr37-txrz-zbe2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.4.12" } ], "aliases": [ "CVE-2025-47939", "GHSA-9hq9-cr36-4wpj" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jj8m-96su-jkek" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/301772?format=api", "vulnerability_id": "VCID-kz49-jax3-27c4", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47938", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00158", "scoring_system": "epss", "scoring_elements": "0.36324", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47938" }, { "reference_url": "https://github.com/TYPO3-CMS/core/commit/b9a8bcb614ecdd42aa27e1c430c6213d6b6b20b3", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core/commit/b9a8bcb614ecdd42aa27e1c430c6213d6b6b20b3" }, { "reference_url": "https://github.com/TYPO3-CMS/setup/commit/60572dd050d8d861921889a19599bfe045fed5fd", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/setup/commit/60572dd050d8d861921889a19599bfe045fed5fd" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-3jrg-97f3-rqh9", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-20T13:56:18Z/" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-3jrg-97f3-rqh9" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47938", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47938" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2025-013", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-20T13:56:18Z/" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2025-013" }, { "reference_url": "https://github.com/advisories/GHSA-3jrg-97f3-rqh9", "reference_id": "GHSA-3jrg-97f3-rqh9", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-3jrg-97f3-rqh9" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/196082?format=api", "purl": "pkg:composer/typo3/cms-core@13.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-arph-mg8d-47dx" }, { "vulnerability": "VCID-yr37-txrz-zbe2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.4.12" } ], "aliases": [ "CVE-2025-47938", "GHSA-3jrg-97f3-rqh9" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-kz49-jax3-27c4" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/301774?format=api", "vulnerability_id": "VCID-v3xn-7tuz-wyf5", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47940", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00316", "scoring_system": "epss", "scoring_elements": "0.54992", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-47940" }, { "reference_url": "https://github.com/TYPO3-CMS/core", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core" }, { "reference_url": "https://github.com/TYPO3-CMS/core/commit/a659cc8c0ae05c44dd7f01d13629cdd2d0b7219b", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3-CMS/core/commit/a659cc8c0ae05c44dd7f01d13629cdd2d0b7219b" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-6frx-j292-c844", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-20T14:35:19Z/" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-6frx-j292-c844" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47940", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47940" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2025-016", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-05-20T14:35:19Z/" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2025-016" }, { "reference_url": "https://github.com/advisories/GHSA-6frx-j292-c844", "reference_id": "GHSA-6frx-j292-c844", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-6frx-j292-c844" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/196082?format=api", "purl": "pkg:composer/typo3/cms-core@13.4.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-arph-mg8d-47dx" }, { "vulnerability": "VCID-yr37-txrz-zbe2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.4.12" } ], "aliases": [ "CVE-2025-47940", "GHSA-6frx-j292-c844" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-v3xn-7tuz-wyf5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/22111?format=api", "vulnerability_id": "VCID-yr37-txrz-zbe2", "summary": "TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool\n### Problem\nLocal platform users who can write to TYPO3’s mail‑file spool directory can craft a file that the system will automatically deserialize without any class restrictions. This flaw allows an attacker to inject and execute arbitrary PHP code in the public scope of the web server.\n\nThe vulnerability is triggered when TYPO3 is configured with `$GLOBALS['TYPO3_CONF_VARS']['MAIL']['transport_spool_type'] = 'file';` and a scheduler task or cron job runs the command `mailer:spool:send`. The spool‑send operation performs the insecure deserialization that is at the core of this issue.\n\n### Solution\nUpdate to TYPO3 versions 10.4.55 ELTS, 11.5.49 ELTS, 12.4.41 LTS, 13.4.23 LTS, 14.0.2 that fix the problem described.\n\n### Credits\nThanks to Vitaly Simonovich for reporting this issue, and to TYPO3 security team members Elias Häußler and Oliver Hader for fixing it.\n\n### References\n* [TYPO3-CORE-SA-2026-004](https://typo3.org/security/advisory/typo3-core-sa-2026-004)", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2026-0859", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00056", "scoring_system": "epss", "scoring_elements": "0.17854", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-0859" }, { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/3225d705080a1bde57a66689621c947da5a4782f", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-13T14:11:54Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/3225d705080a1bde57a66689621c947da5a4782f" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/722bf71c118b0a8e4f2c2494854437d846799a13", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-13T14:11:54Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/722bf71c118b0a8e4f2c2494854437d846799a13" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/e0f0ceee480c203fbb60b87454f5f193e541d27f", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-13T14:11:54Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/e0f0ceee480c203fbb60b87454f5f193e541d27f" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2026-004", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-13T14:11:54Z/" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2026-004" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0859", "reference_id": "CVE-2026-0859", "reference_type": "", "scores": [ { "value": "5.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0859" }, { "reference_url": "https://github.com/advisories/GHSA-7vp9-x248-9vr9", "reference_id": "GHSA-7vp9-x248-9vr9", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-7vp9-x248-9vr9" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-7vp9-x248-9vr9", "reference_id": "GHSA-7vp9-x248-9vr9", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "5.2", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-7vp9-x248-9vr9" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/72179?format=api", "purl": "pkg:composer/typo3/cms-core@13.4.23", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.4.23" }, { "url": "http://public2.vulnerablecode.io/api/packages/72178?format=api", "purl": "pkg:composer/typo3/cms-core@14.0.2", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@14.0.2" } ], "aliases": [ "CVE-2026-0859", "GHSA-7vp9-x248-9vr9" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yr37-txrz-zbe2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/271662?format=api", "vulnerability_id": "VCID-zw6s-4rhh-buct", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-55892", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00186", "scoring_system": "epss", "scoring_elements": "0.40171", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-55892" }, { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/a4abf48d254685f43383e6e7f80d48aebaea56af", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3/commit/a4abf48d254685f43383e6e7f80d48aebaea56af" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-2fx5-pggv-6jjr", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-14T20:12:41Z/" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-2fx5-pggv-6jjr" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55892", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55892" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2025-002", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-14T20:12:41Z/" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2025-002" }, { "reference_url": "https://github.com/advisories/GHSA-2fx5-pggv-6jjr", "reference_id": "GHSA-2fx5-pggv-6jjr", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-2fx5-pggv-6jjr" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/193834?format=api", "purl": "pkg:composer/typo3/cms-core@13.4.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-arph-mg8d-47dx" }, { "vulnerability": "VCID-bwwk-hggs-t3cg" }, { "vulnerability": "VCID-jj8m-96su-jkek" }, { "vulnerability": "VCID-kz49-jax3-27c4" }, { "vulnerability": "VCID-v3xn-7tuz-wyf5" }, { "vulnerability": "VCID-yr37-txrz-zbe2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.4.3" } ], "aliases": [ "CVE-2024-55892", "GHSA-2fx5-pggv-6jjr" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zw6s-4rhh-buct" } ], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/255767?format=api", "vulnerability_id": "VCID-1jtz-qp8k-vfh7", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-34357", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00634", "scoring_system": "epss", "scoring_elements": "0.70717", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-34357" }, { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/376474904f6b9a54dc1b785a2e45277cbd13b0d7", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-12T15:47:12Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/376474904f6b9a54dc1b785a2e45277cbd13b0d7" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/b31d05d1da3eeaeead2d19eb43b1c3f9c88e15ee", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-12T15:47:12Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/b31d05d1da3eeaeead2d19eb43b1c3f9c88e15ee" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/d774642381354d3bf5095a5a26e18acd2767f0b1", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-12T15:47:12Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/d774642381354d3bf5095a5a26e18acd2767f0b1" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2024-009", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-12T15:47:12Z/" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2024-009" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34357", "reference_id": "CVE-2024-34357", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34357" }, { "reference_url": "https://github.com/advisories/GHSA-hw6c-6gwq-3m3m", "reference_id": "GHSA-hw6c-6gwq-3m3m", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-hw6c-6gwq-3m3m" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-hw6c-6gwq-3m3m", "reference_id": "GHSA-hw6c-6gwq-3m3m", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-12T15:47:12Z/" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-hw6c-6gwq-3m3m" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/81037?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.48", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.48" }, { "url": "http://public2.vulnerablecode.io/api/packages/81041?format=api", "purl": "pkg:composer/typo3/cms-core@10.4.45", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.45" }, { "url": "http://public2.vulnerablecode.io/api/packages/81039?format=api", "purl": "pkg:composer/typo3/cms-core@11.5.37", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bwwk-hggs-t3cg" }, { "vulnerability": "VCID-jj8m-96su-jkek" }, { "vulnerability": "VCID-kz49-jax3-27c4" }, { "vulnerability": "VCID-v3xn-7tuz-wyf5" }, { "vulnerability": "VCID-yr37-txrz-zbe2" }, { "vulnerability": "VCID-zw6s-4rhh-buct" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.37" }, { "url": "http://public2.vulnerablecode.io/api/packages/81035?format=api", "purl": "pkg:composer/typo3/cms-core@12.4.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-arph-mg8d-47dx" }, { "vulnerability": "VCID-bwwk-hggs-t3cg" }, { "vulnerability": "VCID-jj8m-96su-jkek" }, { "vulnerability": "VCID-kz49-jax3-27c4" }, { "vulnerability": "VCID-v3xn-7tuz-wyf5" }, { "vulnerability": "VCID-yr37-txrz-zbe2" }, { "vulnerability": "VCID-zw6s-4rhh-buct" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@12.4.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/81033?format=api", "purl": "pkg:composer/typo3/cms-core@13.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-arph-mg8d-47dx" }, { "vulnerability": "VCID-bwwk-hggs-t3cg" }, { "vulnerability": "VCID-jj8m-96su-jkek" }, { "vulnerability": "VCID-kz49-jax3-27c4" }, { "vulnerability": "VCID-v3xn-7tuz-wyf5" }, { "vulnerability": "VCID-yr37-txrz-zbe2" }, { "vulnerability": "VCID-zw6s-4rhh-buct" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.1.1" } ], "aliases": [ "CVE-2024-34357", "GHSA-hw6c-6gwq-3m3m" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1jtz-qp8k-vfh7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/255768?format=api", "vulnerability_id": "VCID-d64j-ghbq-7fbj", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-34358", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0005", "scoring_system": "epss", "scoring_elements": "0.16027", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-34358" }, { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/05c95fed869a1a6dcca06c7077b83b6ea866ff14", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-12T15:43:40Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/05c95fed869a1a6dcca06c7077b83b6ea866ff14" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/1e70ebf736935413b0531004839362b4fb0755a5", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-12T15:43:40Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/1e70ebf736935413b0531004839362b4fb0755a5" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/df7909b6a1cf0f12a42994d0cc3376b607746142", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-12T15:43:40Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/df7909b6a1cf0f12a42994d0cc3376b607746142" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2024-010", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-12T15:43:40Z/" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2024-010" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34358", "reference_id": "CVE-2024-34358", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34358" }, { "reference_url": "https://github.com/advisories/GHSA-36g8-62qv-5957", "reference_id": "GHSA-36g8-62qv-5957", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-36g8-62qv-5957" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-36g8-62qv-5957", "reference_id": "GHSA-36g8-62qv-5957", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-12T15:43:40Z/" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-36g8-62qv-5957" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/81037?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.48", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.48" }, { "url": "http://public2.vulnerablecode.io/api/packages/81041?format=api", "purl": "pkg:composer/typo3/cms-core@10.4.45", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.45" }, { "url": "http://public2.vulnerablecode.io/api/packages/81039?format=api", "purl": "pkg:composer/typo3/cms-core@11.5.37", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bwwk-hggs-t3cg" }, { "vulnerability": "VCID-jj8m-96su-jkek" }, { "vulnerability": "VCID-kz49-jax3-27c4" }, { "vulnerability": "VCID-v3xn-7tuz-wyf5" }, { "vulnerability": "VCID-yr37-txrz-zbe2" }, { "vulnerability": "VCID-zw6s-4rhh-buct" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.37" }, { "url": "http://public2.vulnerablecode.io/api/packages/81035?format=api", "purl": "pkg:composer/typo3/cms-core@12.4.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-arph-mg8d-47dx" }, { "vulnerability": "VCID-bwwk-hggs-t3cg" }, { "vulnerability": "VCID-jj8m-96su-jkek" }, { "vulnerability": "VCID-kz49-jax3-27c4" }, { "vulnerability": "VCID-v3xn-7tuz-wyf5" }, { "vulnerability": "VCID-yr37-txrz-zbe2" }, { "vulnerability": "VCID-zw6s-4rhh-buct" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@12.4.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/81033?format=api", "purl": "pkg:composer/typo3/cms-core@13.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-arph-mg8d-47dx" }, { "vulnerability": "VCID-bwwk-hggs-t3cg" }, { "vulnerability": "VCID-jj8m-96su-jkek" }, { "vulnerability": "VCID-kz49-jax3-27c4" }, { "vulnerability": "VCID-v3xn-7tuz-wyf5" }, { "vulnerability": "VCID-yr37-txrz-zbe2" }, { "vulnerability": "VCID-zw6s-4rhh-buct" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.1.1" } ], "aliases": [ "CVE-2024-34358", "GHSA-36g8-62qv-5957" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-d64j-ghbq-7fbj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/255766?format=api", "vulnerability_id": "VCID-dqru-rt8a-kkgy", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-34356", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00634", "scoring_system": "epss", "scoring_elements": "0.70717", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-34356" }, { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/2832e2f51f929aeddb5de7d667538a33ceda8156", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-14T15:21:11Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/2832e2f51f929aeddb5de7d667538a33ceda8156" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/d0393a879a32fb4e3569acad6bdb5cda776be1e5", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-14T15:21:11Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/d0393a879a32fb4e3569acad6bdb5cda776be1e5" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/e95a1224719efafb9cab2d85964f240fd0356e64", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-14T15:21:11Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/e95a1224719efafb9cab2d85964f240fd0356e64" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2024-008", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-14T15:21:11Z/" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2024-008" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34356", "reference_id": "CVE-2024-34356", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34356" }, { "reference_url": "https://github.com/advisories/GHSA-v6mw-h7w6-59w3", "reference_id": "GHSA-v6mw-h7w6-59w3", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-v6mw-h7w6-59w3" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-v6mw-h7w6-59w3", "reference_id": "GHSA-v6mw-h7w6-59w3", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-14T15:21:11Z/" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-v6mw-h7w6-59w3" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/81037?format=api", "purl": "pkg:composer/typo3/cms-core@9.5.48", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@9.5.48" }, { "url": "http://public2.vulnerablecode.io/api/packages/81041?format=api", "purl": "pkg:composer/typo3/cms-core@10.4.45", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@10.4.45" }, { "url": "http://public2.vulnerablecode.io/api/packages/81039?format=api", "purl": "pkg:composer/typo3/cms-core@11.5.37", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-bwwk-hggs-t3cg" }, { "vulnerability": "VCID-jj8m-96su-jkek" }, { "vulnerability": "VCID-kz49-jax3-27c4" }, { "vulnerability": "VCID-v3xn-7tuz-wyf5" }, { "vulnerability": "VCID-yr37-txrz-zbe2" }, { "vulnerability": "VCID-zw6s-4rhh-buct" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@11.5.37" }, { "url": "http://public2.vulnerablecode.io/api/packages/81035?format=api", "purl": "pkg:composer/typo3/cms-core@12.4.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-arph-mg8d-47dx" }, { "vulnerability": "VCID-bwwk-hggs-t3cg" }, { "vulnerability": "VCID-jj8m-96su-jkek" }, { "vulnerability": "VCID-kz49-jax3-27c4" }, { "vulnerability": "VCID-v3xn-7tuz-wyf5" }, { "vulnerability": "VCID-yr37-txrz-zbe2" }, { "vulnerability": "VCID-zw6s-4rhh-buct" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@12.4.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/81033?format=api", "purl": "pkg:composer/typo3/cms-core@13.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-arph-mg8d-47dx" }, { "vulnerability": "VCID-bwwk-hggs-t3cg" }, { "vulnerability": "VCID-jj8m-96su-jkek" }, { "vulnerability": "VCID-kz49-jax3-27c4" }, { "vulnerability": "VCID-v3xn-7tuz-wyf5" }, { "vulnerability": "VCID-yr37-txrz-zbe2" }, { "vulnerability": "VCID-zw6s-4rhh-buct" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.1.1" } ], "aliases": [ "CVE-2024-34356", "GHSA-v6mw-h7w6-59w3" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dqru-rt8a-kkgy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/255765?format=api", "vulnerability_id": "VCID-ge68-yyh4-bubv", "summary": "", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2024-34355", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00615", "scoring_system": "epss", "scoring_elements": "0.70237", "published_at": "2026-05-30T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2024-34355" }, { "reference_url": "https://github.com/TYPO3/typo3", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/TYPO3/typo3" }, { "reference_url": "https://github.com/TYPO3/typo3/commit/56afa304ba8b5ad302e15df5def71bcc8d820375", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-15T13:21:14Z/" } ], "url": "https://github.com/TYPO3/typo3/commit/56afa304ba8b5ad302e15df5def71bcc8d820375" }, { "reference_url": "https://typo3.org/security/advisory/typo3-core-sa-2024-007", "reference_id": "", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-15T13:21:14Z/" } ], "url": "https://typo3.org/security/advisory/typo3-core-sa-2024-007" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34355", "reference_id": "CVE-2024-34355", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34355" }, { "reference_url": "https://github.com/advisories/GHSA-xjwx-78x7-q6jc", "reference_id": "GHSA-xjwx-78x7-q6jc", "reference_type": "", "scores": [ { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-xjwx-78x7-q6jc" }, { "reference_url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-xjwx-78x7-q6jc", "reference_id": "GHSA-xjwx-78x7-q6jc", "reference_type": "", "scores": [ { "value": "3.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" }, { "value": "LOW", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-05-15T13:21:14Z/" } ], "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-xjwx-78x7-q6jc" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/81033?format=api", "purl": "pkg:composer/typo3/cms-core@13.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-arph-mg8d-47dx" }, { "vulnerability": "VCID-bwwk-hggs-t3cg" }, { "vulnerability": "VCID-jj8m-96su-jkek" }, { "vulnerability": "VCID-kz49-jax3-27c4" }, { "vulnerability": "VCID-v3xn-7tuz-wyf5" }, { "vulnerability": "VCID-yr37-txrz-zbe2" }, { "vulnerability": "VCID-zw6s-4rhh-buct" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.1.1" } ], "aliases": [ "CVE-2024-34355", "GHSA-xjwx-78x7-q6jc" ], "risk_score": 1.4, "exploitability": "0.5", "weighted_severity": "2.7", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ge68-yyh4-bubv" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@13.1.1" }