{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/109959?format=json","vulnerability_id":"VCID-vzgw-9wuj-j3fd","summary":"Cross-site scripting from content entered in the tags and multiselect fields\n### Introduction\n\nCross-site scripting (XSS) is a type of vulnerability that allows to execute any kind of JavaScript code inside the Panel session of the same or other users. In the Panel, a harmful script can for example trigger requests to Kirby's API with the permissions of the victim.\n\nSuch vulnerabilities are critical if you might have potential attackers in your group of authenticated Panel users. They can escalate their privileges if they get access to the Panel session of an admin user. Depending on your site, other JavaScript-powered attacks are possible.\n\n### Impact\n\nThe tags and multiselect fields allow to select tags from an autocompleted list. The tags field also allows to enter new tags or edit existing tags. Kirby already handled escaping of the autocompleted tags, but unfortunately the Panel used HTML rendering for new or edited tags as well as for custom tags from the content file.\n\nThis allowed **attackers with Panel access** to store malicious HTML code in a tag. The browser of the victim who visited the modified page in the Panel will then have rendered this malicious HTML code.\n\nIt also allowed **self-inflicted XSS attacks** in the tags field (meaning that malicious code is executed in the browser of the user who entered it). This could be used in social engineering attacks where a victim is convinced by an attacker to enter malicious code into a tags field.\n\n**Visitors without Panel access** could *only* use this attack vector if your site allows changing the content of a tags or multiselect field from a frontend form (for example user self-registration or the creation of pages from a contact or other frontend form). If you validate or sanitize the provided form data, you are already protected against such attacks by external visitors.\n\nYou are also *not* affected by these vulnerabilities if your site doesn't have untrustworthy users with Panel access or a way to modify field values from the frontend or if you don't use the tags or multiselect fields.\n\n### Patches\n\nThe problems have been patched in [Kirby 3.5.8.1](https://github.com/getkirby/kirby/releases/tag/3.5.8.1), [Kirby 3.6.6.1](https://github.com/getkirby/kirby/releases/tag/3.6.6.1) and [Kirby 3.7.4](https://github.com/getkirby/kirby/releases/tag/3.7.4). Please update to one of these or a [later version](https://github.com/getkirby/kirby/releases) to fix the vulnerabilities.\n\n**Note:** The fixes for these vulnerabilities have the side effect that values in the tags and multiselect fields that come from dynamic options are displayed with double escaping (e.g. the `&` character is displayed as `&`). In the fix for Kirby 3.5, every value in the tags field is displayed with double escaping when dynamic options are enabled, while dynamic options themselves are displayed with triple escaping. We will fix the double/triple escaping issues with a refactoring of the options fields (tags, multiselect, checkboxes, radio, select and toggles) in Kirby 3.8.\n\n### Workarounds\n\nWe recommend to update to one of the patch releases. If you cannot update immediately, you can work around the issue by disabling the tags and multiselect fields. This can be done by uncommenting these fields from all your blueprints.","aliases":[{"alias":"GHSA-rv3r-vqjj-8c76"},{"alias":"GMS-2022-3697"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/604182?format=json","purl":"pkg:composer/getkirby/cms@3.5.8.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.5.8.1"},{"url":"http://public2.vulnerablecode.io/api/packages/604345?format=json","purl":"pkg:composer/getkirby/cms@3.6.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/148071?format=json","purl":"pkg:composer/getkirby/cms@3.7.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.7.4"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/58330?format=json","purl":"pkg:composer/getkirby/cms@3.5.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-9cf2-kt83-e7cb"},{"vulnerability":"VCID-c2yw-7kk6-ykd8"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-wa88-mnaj-j7gx"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.5.7"},{"url":"http://public2.vulnerablecode.io/api/packages/544169?format=json","purl":"pkg:composer/getkirby/cms@3.5.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-9cf2-kt83-e7cb"},{"vulnerability":"VCID-c2yw-7kk6-ykd8"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-wa88-mnaj-j7gx"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.5.7.1"},{"url":"http://public2.vulnerablecode.io/api/packages/59569?format=json","purl":"pkg:composer/getkirby/cms@3.5.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-wa88-mnaj-j7gx"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.5.8"},{"url":"http://public2.vulnerablecode.io/api/packages/66304?format=json","purl":"pkg:composer/getkirby/cms@3.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/604329?format=json","purl":"pkg:composer/getkirby/cms@3.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/604330?format=json","purl":"pkg:composer/getkirby/cms@3.6.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.1.1"},{"url":"http://public2.vulnerablecode.io/api/packages/604331?format=json","purl":"pkg:composer/getkirby/cms@3.6.2-rc.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.2-rc.1"},{"url":"http://public2.vulnerablecode.io/api/packages/604332?format=json","purl":"pkg:composer/getkirby/cms@3.6.2-rc.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.2-rc.2"},{"url":"http://public2.vulnerablecode.io/api/packages/604333?format=json","purl":"pkg:composer/getkirby/cms@3.6.2-rc.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.2-rc.3"},{"url":"http://public2.vulnerablecode.io/api/packages/604334?format=json","purl":"pkg:composer/getkirby/cms@3.6.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.2"},{"url":"http://public2.vulnerablecode.io/api/packages/604335?format=json","purl":"pkg:composer/getkirby/cms@3.6.3-rc.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.3-rc.1"},{"url":"http://public2.vulnerablecode.io/api/packages/604336?format=json","purl":"pkg:composer/getkirby/cms@3.6.3-rc.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.3-rc.2"},{"url":"http://public2.vulnerablecode.io/api/packages/604337?format=json","purl":"pkg:composer/getkirby/cms@3.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/604338?format=json","purl":"pkg:composer/getkirby/cms@3.6.3.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.3.1"},{"url":"http://public2.vulnerablecode.io/api/packages/604339?format=json","purl":"pkg:composer/getkirby/cms@3.6.4-rc.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.4-rc.1"},{"url":"http://public2.vulnerablecode.io/api/packages/604340?format=json","purl":"pkg:composer/getkirby/cms@3.6.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.4"},{"url":"http://public2.vulnerablecode.io/api/packages/604341?format=json","purl":"pkg:composer/getkirby/cms@3.6.5-rc.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.5-rc.1"},{"url":"http://public2.vulnerablecode.io/api/packages/604342?format=json","purl":"pkg:composer/getkirby/cms@3.6.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.5"},{"url":"http://public2.vulnerablecode.io/api/packages/604343?format=json","purl":"pkg:composer/getkirby/cms@3.6.6-rc.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.6-rc.1"},{"url":"http://public2.vulnerablecode.io/api/packages/604344?format=json","purl":"pkg:composer/getkirby/cms@3.6.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.6.6"},{"url":"http://public2.vulnerablecode.io/api/packages/66305?format=json","purl":"pkg:composer/getkirby/cms@3.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.7.0"},{"url":"http://public2.vulnerablecode.io/api/packages/604346?format=json","purl":"pkg:composer/getkirby/cms@3.7.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.7.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/604347?format=json","purl":"pkg:composer/getkirby/cms@3.7.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.7.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/604348?format=json","purl":"pkg:composer/getkirby/cms@3.7.1-rc.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.7.1-rc.1"},{"url":"http://public2.vulnerablecode.io/api/packages/604349?format=json","purl":"pkg:composer/getkirby/cms@3.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.7.1"},{"url":"http://public2.vulnerablecode.io/api/packages/604350?format=json","purl":"pkg:composer/getkirby/cms@3.7.2-rc.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.7.2-rc.1"},{"url":"http://public2.vulnerablecode.io/api/packages/604351?format=json","purl":"pkg:composer/getkirby/cms@3.7.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.7.2"},{"url":"http://public2.vulnerablecode.io/api/packages/604352?format=json","purl":"pkg:composer/getkirby/cms@3.7.2.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.7.2.1"},{"url":"http://public2.vulnerablecode.io/api/packages/604353?format=json","purl":"pkg:composer/getkirby/cms@3.7.3-rc.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.7.3-rc.1"},{"url":"http://public2.vulnerablecode.io/api/packages/604354?format=json","purl":"pkg:composer/getkirby/cms@3.7.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.7.3"},{"url":"http://public2.vulnerablecode.io/api/packages/604355?format=json","purl":"pkg:composer/getkirby/cms@3.7.4-rc.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1zg8-cndr-73hk"},{"vulnerability":"VCID-4wcn-6ujb-tuhr"},{"vulnerability":"VCID-8a1t-g8pv-4fcb"},{"vulnerability":"VCID-e9gx-3frn-gfeu"},{"vulnerability":"VCID-g46n-k3pp-t3a5"},{"vulnerability":"VCID-ge49-hn25-eqba"},{"vulnerability":"VCID-h2gp-rqt7-ckdf"},{"vulnerability":"VCID-hsgj-2c1x-cuhu"},{"vulnerability":"VCID-kfkm-1a5s-jyf9"},{"vulnerability":"VCID-mhvv-3qdd-qfax"},{"vulnerability":"VCID-nt5x-k3wp-u3hu"},{"vulnerability":"VCID-pnk6-vjcp-u7aa"},{"vulnerability":"VCID-s33b-8zp5-yyaa"},{"vulnerability":"VCID-sbfh-v9uy-u3cp"},{"vulnerability":"VCID-seme-4ery-6qbp"},{"vulnerability":"VCID-t7he-gjus-hyfm"},{"vulnerability":"VCID-umm8-7cx6-4fcu"},{"vulnerability":"VCID-vzgw-9wuj-j3fd"},{"vulnerability":"VCID-w47w-xzfq-7bdk"},{"vulnerability":"VCID-w4e7-nn14-77hf"},{"vulnerability":"VCID-w8k5-mcu9-zuh3"},{"vulnerability":"VCID-ypuf-fpfc-b3bg"},{"vulnerability":"VCID-z6y7-rubq-8bdh"},{"vulnerability":"VCID-zakx-qtwy-gbba"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/getkirby/cms@3.7.4-rc.1"}],"references":[{"reference_url":"https://github.com/getkirby/kirby","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getkirby/kirby"},{"reference_url":"https://github.com/getkirby/kirby/security/advisories/GHSA-rv3r-vqjj-8c76","reference_id":"","reference_type":"","scores":[{"value":"7.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/getkirby/kirby/security/advisories/GHSA-rv3r-vqjj-8c76"},{"reference_url":"https://github.com/advisories/GHSA-rv3r-vqjj-8c76","reference_id":"GHSA-rv3r-vqjj-8c76","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-rv3r-vqjj-8c76"}],"weaknesses":[{"cwe_id":79,"name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."}],"exploits":[],"severity_range_score":"7.0 - 8.9","exploitability":"0.5","weighted_severity":"8.0","risk_score":4.0,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-vzgw-9wuj-j3fd"}