VulnerableCode Package Details - pkg:composer/showdoc/showdoc@2.4.11

Vulnerabilities affecting this package (35)

Vulnerability	Summary	Fixed by
VCID-158e-gra4-pke9 Aliases: CVE-2021-4000 GHSA-8c9x-wfgj-v78w	Open Redirect in showdoc	There are no reported fixed by versions.
VCID-3ez4-xzmr-qbd6 Aliases: CVE-2022-0880 GHSA-gq77-3r6x-383w	Cross-site Scripting in ShowDoc	2.10.2 Affected by 19 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-3n97-92yn-ckck Aliases: CVE-2022-0951 GHSA-j6jg-w79c-7p8v	File Upload Restriction Bypass leading to Cross-site Scripting in ShowDoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-5a8d-7jh7-tfev Aliases: CVE-2021-3989 GHSA-f545-vpwp-r9j7	showdoc is vulnerable to URL Redirection to Untrusted Site	2.9.13 Affected by 25 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-7ugv-9fct-fbgh Aliases: CVE-2021-3990 GHSA-vrgh-5w3c-ggf8	showdoc is vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	2.9.13 Affected by 25 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-93sj-gsh9-5bb1 Aliases: CVE-2022-0941 GHSA-wg4r-q74r-p7c8	Cross-site Scripting in ShowDoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-am4w-8by3-aygq Aliases: CVE-2021-3993 GHSA-6pqm-xvfc-w7p4	showdoc is vulnerable to Cross-Site Request Forgery (CSRF)	2.9.13 Affected by 25 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-auh1-nb9b-zfg3 Aliases: CVE-2022-0950 GHSA-v94v-pxqp-5qgj	Cross-site Scripting in ShowDoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-bvhd-mwnt-ruev Aliases: CVE-2021-3683 GHSA-x5jp-9fmm-m9pf	showdoc is vulnerable to Cross-Site Request Forgery (CSRF)	There are no reported fixed by versions.
VCID-c77c-87m4-wkaw Aliases: CVE-2025-0520 GHSA-6jmr-r7p6-f5wr	An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.	2.8.7 Affected by 34 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-deg7-4ma6-tyd2 Aliases: CVE-2022-0942 GHSA-9fcc-7g44-mxrj	Cross-site Scripting in ShowDoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-eqcs-tmpq-9ub7 Aliases: CVE-2021-3776 GHSA-m4hj-wg2r-qpcr	showdoc is vulnerable to Cross-Site Request Forgery (CSRF)	2.9.13 Affected by 25 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-ewjx-puts-f7h4 Aliases: CVE-2022-0945 GHSA-vpwq-6cp4-ffqc	Stored Cross-site Scripting in ShowDoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-fa1j-6bzu-a3a5 Aliases: CVE-2021-4017 GHSA-f77h-m9w2-vvg2	showdoc is vulnerable to Cross-Site Request Forgery (CSRF)	2.9.13 Affected by 25 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-fk3v-vaj6-dka4 Aliases: CVE-2022-1034 GHSA-xp82-jmw8-mjxp	Unrestricted Upload of File with Dangerous Type in ShowDoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-fyk4-u9vt-pfgj Aliases: CVE-2021-4168 GHSA-7vxc-chqj-h83g	showdoc is vulnerable to Cross-Site Request Forgery (CSRF)	2.9.15 Affected by 23 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-kjsp-v37r-yue1 Aliases: CVE-2022-0362 GHSA-9cq5-xgg4-x477	SQL Injection in showdoc	2.10.3 Affected by 19 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-kwse-tbqn-tqfr Aliases: CVE-2022-0965 GHSA-v8mp-hhjq-h4cj	Cross-site Scripting in ShowDoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-m3mp-m3pq-fbd9 Aliases: CVE-2022-0956 GHSA-wg8p-w946-c482	Cross-site Scripting in ShowDoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-mybn-n9zu-ukfm Aliases: CVE-2022-0960 GHSA-rphc-h572-2x9f	Cross-site Scripting in showdoc/showdoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-ny73-vkpe-mye4 Aliases: CVE-2022-0937 GHSA-mg5h-9rhq-4cqx	Cross-site Scripting in ShowDoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-pe2f-4yes-cyew Aliases: CVE-2022-0409 GHSA-6x3j-x9rp-whxp	Unrestricted Upload of File with Dangerous Type in showdoc	2.10.2 Affected by 19 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-pupy-jprc-17f4 Aliases: CVE-2022-0962 GHSA-pccm-j6vj-jwwf	Cross-site Scripting in ShowDoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-s5vu-x24p-4uga Aliases: CVE-2022-0964 GHSA-xm3x-787m-p66r	Cross-site Scripting in ShowDoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-u4xp-xb3z-r7dm Aliases: CVE-2022-0967 GHSA-3pg8-c473-w6rr	Stored Cross-site Scripting in showdoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-ubse-tfbr-audj Aliases: CVE-2026-6982 GHSA-fm5r-cj7v-rj2c	A vulnerability was determined in star7th ShowDoc up to 2.10.10/3.6.2/3.8.0. Affected by this vulnerability is an unknown functionality of the file server/Application/Api/Controller/PageController.class.PHP of the component API Page Sort Endpoint. Executing a manipulation of the argument pages can lead to sql injection. The attack may be launched remotely. Upgrading to version 3.8.1 addresses this issue. It is suggested to upgrade the affected component. According to the researcher, "[t]he vendor explicitly stated they will not backport patches to the older affected versions."	3.8.1 Affected by 0 other vulnerabilities.
VCID-urvq-g1g1-8bgy Aliases: CVE-2022-0940 GHSA-82j4-vr25-x394	Cross-site Scripting in ShowDoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-uwjs-9kjy-jqcp Aliases: CVE-2021-4172 GHSA-7x22-pmw5-66mq	Cross-site Scripting in showdoc	2.10.2 Affected by 19 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-vjve-v4fx-hffb Aliases: CVE-2022-0957 GHSA-q73m-3q7r-fpf7	Cross-site Scripting in ShowDoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-w3qg-kqjv-r7dk Aliases: CVE-2022-0079 GHSA-5mj6-3cmq-fh34	showdoc is vulnerable to Generation of Error Message Containing Sensitive Information	2.10.0 Affected by 22 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-wbdc-jg9s-vqbp Aliases: CVE-2021-3680 GHSA-8vh3-29mr-m9xg		2.9.8 Affected by 33 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-x5zj-4exs-t7em Aliases: CVE-2022-0938 GHSA-mw75-qvfr-hpmr	Cross-site Scripting in ShowDoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-x91u-2hwa-3fhu Aliases: CVE-2021-3775 GHSA-pjjf-hc4q-g298	showdoc is vulnerable to Cross-Site Request Forgery (CSRF)	There are no reported fixed by versions.
VCID-xe8d-vba4-2yhw Aliases: CVE-2021-3678 GHSA-j85q-whc9-g4p9		2.9.8 Affected by 33 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-zsvd-ysfj-gkad Aliases: CVE-2022-0946 GHSA-qq74-vgcf-54c3	Cross-site Scripting in ShowDoc	2.10.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-12T22:13:54.504891+00:00	GitLab Importer	Affected by	VCID-ubse-tfbr-audj	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2026-6982.yml	38.6.0
2026-06-12T20:00:31.981647+00:00	GitLab Importer	Affected by	VCID-c77c-87m4-wkaw	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2025-0520.yml	38.6.0
2026-06-12T18:03:13.226833+00:00	GitLab Importer	Affected by	VCID-fk3v-vaj6-dka4	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-1034.yml	38.6.0
2026-06-12T18:02:33.060862+00:00	GitLab Importer	Affected by	VCID-u4xp-xb3z-r7dm	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0967.yml	38.6.0
2026-06-12T18:02:32.365646+00:00	GitLab Importer	Affected by	VCID-m3mp-m3pq-fbd9	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0956.yml	38.6.0
2026-06-12T18:02:31.645254+00:00	GitLab Importer	Affected by	VCID-vjve-v4fx-hffb	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0957.yml	38.6.0
2026-06-12T18:02:29.274655+00:00	GitLab Importer	Affected by	VCID-3n97-92yn-ckck	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0951.yml	38.6.0
2026-06-12T18:02:26.575577+00:00	GitLab Importer	Affected by	VCID-ewjx-puts-f7h4	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0945.yml	38.6.0
2026-06-12T18:02:25.868156+00:00	GitLab Importer	Affected by	VCID-deg7-4ma6-tyd2	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0942.yml	38.6.0
2026-06-12T18:02:24.992822+00:00	GitLab Importer	Affected by	VCID-kwse-tbqn-tqfr	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0965.yml	38.6.0
2026-06-12T18:02:23.483654+00:00	GitLab Importer	Affected by	VCID-auh1-nb9b-zfg3	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0950.yml	38.6.0
2026-06-12T18:02:22.781580+00:00	GitLab Importer	Affected by	VCID-s5vu-x24p-4uga	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0964.yml	38.6.0
2026-06-12T18:02:21.020675+00:00	GitLab Importer	Affected by	VCID-x5zj-4exs-t7em	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0938.yml	38.6.0
2026-06-12T18:02:20.279476+00:00	GitLab Importer	Affected by	VCID-mybn-n9zu-ukfm	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0960.yml	38.6.0
2026-06-12T18:02:18.484898+00:00	GitLab Importer	Affected by	VCID-zsvd-ysfj-gkad	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0946.yml	38.6.0
2026-06-12T18:02:17.534503+00:00	GitLab Importer	Affected by	VCID-93sj-gsh9-5bb1	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0941.yml	38.6.0
2026-06-12T18:02:13.595025+00:00	GitLab Importer	Affected by	VCID-ny73-vkpe-mye4	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0937.yml	38.6.0
2026-06-12T18:02:11.469766+00:00	GitLab Importer	Affected by	VCID-pupy-jprc-17f4	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0962.yml	38.6.0
2026-06-12T18:02:10.069447+00:00	GitLab Importer	Affected by	VCID-urvq-g1g1-8bgy	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0940.yml	38.6.0
2026-06-12T18:01:59.377764+00:00	GitLab Importer	Affected by	VCID-3ez4-xzmr-qbd6	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0880.yml	38.6.0
2026-06-12T18:00:17.286530+00:00	GitLab Importer	Affected by	VCID-pe2f-4yes-cyew	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0409.yml	38.6.0
2026-06-12T17:56:36.713811+00:00	GitLab Importer	Affected by	VCID-kjsp-v37r-yue1	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0362.yml	38.6.0
2026-06-12T17:56:27.045664+00:00	GitLab Importer	Affected by	VCID-uwjs-9kjy-jqcp	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2021-4172.yml	38.6.0
2026-06-12T17:54:51.699231+00:00	GitLab Importer	Affected by	VCID-w3qg-kqjv-r7dk	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2022-0079.yml	38.6.0
2026-06-12T17:54:46.196535+00:00	GitLab Importer	Affected by	VCID-fyk4-u9vt-pfgj	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2021-4168.yml	38.6.0
2026-06-12T17:53:16.103936+00:00	GitLab Importer	Affected by	VCID-158e-gra4-pke9	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2021-4000.yml	38.6.0
2026-06-12T17:53:06.216216+00:00	GitLab Importer	Affected by	VCID-7ugv-9fct-fbgh	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2021-3990.yml	38.6.0
2026-06-12T17:53:05.548418+00:00	GitLab Importer	Affected by	VCID-5a8d-7jh7-tfev	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2021-3989.yml	38.6.0
2026-06-12T17:53:03.975029+00:00	GitLab Importer	Affected by	VCID-am4w-8by3-aygq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2021-3993.yml	38.6.0
2026-06-12T17:52:54.572727+00:00	GitLab Importer	Affected by	VCID-fa1j-6bzu-a3a5	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2021-4017.yml	38.6.0
2026-06-12T17:51:51.163317+00:00	GitLab Importer	Affected by	VCID-x91u-2hwa-3fhu	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2021-3775.yml	38.6.0
2026-06-12T17:51:49.665041+00:00	GitLab Importer	Affected by	VCID-eqcs-tmpq-9ub7	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2021-3776.yml	38.6.0
2026-06-12T17:51:49.017681+00:00	GitLab Importer	Affected by	VCID-bvhd-mwnt-ruev	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2021-3683.yml	38.6.0
2026-06-12T17:44:52.504442+00:00	GitLab Importer	Affected by	VCID-xe8d-vba4-2yhw	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2021-3678.yml	38.6.0
2026-06-12T17:44:51.874873+00:00	GitLab Importer	Affected by	VCID-wbdc-jg9s-vqbp	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/showdoc/showdoc/CVE-2021-3680.yml	38.6.0

Next non-vulnerable version	3.8.1
Latest non-vulnerable version	3.8.1
Risk	10.0