Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/mautic/core@4.4.18
purl pkg:composer/mautic/core@4.4.18
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-x16f-ftqk-n3e2 Mautic user without privileged access to the Marketplace can install and uninstall composer packages A non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked. CVE-2025-13828
GHSA-3fq7-c5m8-g86x

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T11:00:36.815651+00:00 GithubOSV Importer Fixing VCID-x16f-ftqk-n3e2 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/12/GHSA-3fq7-c5m8-g86x/GHSA-3fq7-c5m8-g86x.json 38.6.0
2026-05-31T01:06:05.689786+00:00 GHSA Importer Fixing VCID-x16f-ftqk-n3e2 https://github.com/advisories/GHSA-3fq7-c5m8-g86x 38.6.0
2026-05-30T21:05:21.453855+00:00 GitLab Importer Fixing VCID-x16f-ftqk-n3e2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mautic/core/CVE-2025-13828.yml 38.6.0