Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/pimcore/pimcore@10.1.1
purl pkg:composer/pimcore/pimcore@10.1.1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-a66j-sth4-d3dc CKEditor 4 vulnerabilities in versions <4.16.1 Details see: https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-m94c-37g6-cjhc ( CVE-2021-37695 ) https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-6226-h7ff-ch6c ( CVE-2021-32808 ) https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-7889-rm5j-hpgg ( CVE-2021-32809 ) Patch: https://github.com/pimcore/pimcore/pull/10032 GHSA-cfcv-q4qq-2ph4
GMS-2021-117
VCID-p33r-uxhp-q3eu Improper Neutralization of Formula Elements in a CSV File Pimcore is an open source data & experience management platform., Data Object CSV import allows formular injection. The problem is patched Aside from upgrading, one may apply the patch manually as a workaround. CVE-2021-37702
GHSA-pp2h-95hm-hv9r