Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/appwrite/server-ce@1.0.3
purl pkg:composer/appwrite/server-ce@1.0.3
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-dtju-jew3-3qgz
Aliases:
CVE-2023-27159
GHSA-hxgx-584x-vwm8
Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T03:38:08.098720+00:00 GitLab Importer Affected by VCID-dtju-jew3-3qgz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/appwrite/server-ce/CVE-2023-27159.yml 38.6.0