Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/joomla@2.5.0
purl pkg:npm/joomla@2.5.0
Next non-vulnerable version 3.9.3
Latest non-vulnerable version 3.9.3
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-s3dg-sjc3-w3hh
Aliases:
CVE-2019-7743
GHSA-5m3w-rvvh-8fx6
Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for objection injection attacks because there is no protection mechanism (such as the TYPO3 PHAR stream wrapper) to prevent use of the phar:// handler for non .phar-files.
3.9.3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:42:53.054855+00:00 GitLab Importer Affected by VCID-s3dg-sjc3-w3hh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/joomla/CVE-2019-7743.yml 38.6.0