Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/contao/core-bundle@4.13.57
purl pkg:composer/contao/core-bundle@4.13.57
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-r1h5-ag74-dbaw Contao is vulnerable to cross-site scripting in templates It is possible to inject code into the template output that will be executed in the browser in the front end and back end. CVE-2025-65961
GHSA-68q5-78xp-cwwc
VCID-wyd5-t8at-8bba Contao is vulnerable to remote code execution in template closures Backend users with precise control over the contents of template closures can execute arbitrary PHP functions that do not have required parameters. CVE-2025-65960
GHSA-98vj-mm79-v77r

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-05T21:52:56.339663+00:00 GHSA Importer Fixing VCID-r1h5-ag74-dbaw https://github.com/advisories/GHSA-68q5-78xp-cwwc 38.6.0
2026-06-05T21:52:55.813819+00:00 GHSA Importer Fixing VCID-wyd5-t8at-8bba https://github.com/advisories/GHSA-98vj-mm79-v77r 38.6.0
2026-06-04T17:12:46.599177+00:00 GithubOSV Importer Fixing VCID-wyd5-t8at-8bba https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/11/GHSA-98vj-mm79-v77r/GHSA-98vj-mm79-v77r.json 38.6.0
2026-06-04T17:12:41.869505+00:00 GithubOSV Importer Fixing VCID-r1h5-ag74-dbaw https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/11/GHSA-68q5-78xp-cwwc/GHSA-68q5-78xp-cwwc.json 38.6.0
2026-06-02T04:48:53.086150+00:00 GitLab Importer Fixing VCID-r1h5-ag74-dbaw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/contao/core-bundle/CVE-2025-65961.yml 38.6.0
2026-06-02T04:48:48.351350+00:00 GitLab Importer Fixing VCID-wyd5-t8at-8bba https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/contao/core-bundle/CVE-2025-65960.yml 38.6.0