{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/80965?format=json","vulnerability_id":"VCID-28yh-hjbw-w7ce","summary":"CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. From version 0.26.0 to before version 0.31.8.0, the auth filter has the deactivated/banned user check commented out. This issue has been patched in version 0.31.8.0.","aliases":[{"alias":"CVE-2026-41891"},{"alias":"GHSA-5hfv-c864-qcq9"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1206397?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.31.8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.31.8"},{"url":"http://public2.vulnerablecode.io/api/packages/1053388?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.31.8.0","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.31.8.0"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1087083?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.26.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-48sm-mr7f-ducd"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.26.0"},{"url":"http://public2.vulnerablecode.io/api/packages/936798?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.26.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2h4w-tk7x-zfa3"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-39jy-pv24-z7bu"},{"vulnerability":"VCID-3fm1-2zb6-dqd9"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-6u34-vs68-c3eq"},{"vulnerability":"VCID-6wyz-uw9f-uufq"},{"vulnerability":"VCID-81tn-964g-nqhe"},{"vulnerability":"VCID-8vsd-ed8b-57ec"},{"vulnerability":"VCID-9hx2-c5ne-1yca"},{"vulnerability":"VCID-ahyj-sx5e-yfet"},{"vulnerability":"VCID-bjpa-j4py-vubs"},{"vulnerability":"VCID-bnux-7fjj-mua5"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dzem-3pkm-akgm"},{"vulnerability":"VCID-eda1-ec29-67h4"},{"vulnerability":"VCID-fu8m-c32c-8kam"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-mpqf-b4wu-aua6"},{"vulnerability":"VCID-pnx8-75mz-w7ab"},{"vulnerability":"VCID-qg51-wxa8-1ubu"},{"vulnerability":"VCID-s3vf-jvpc-77a6"},{"vulnerability":"VCID-sjer-5du4-3qft"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.26.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/936799?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.26.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2h4w-tk7x-zfa3"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-39jy-pv24-z7bu"},{"vulnerability":"VCID-3fm1-2zb6-dqd9"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-6u34-vs68-c3eq"},{"vulnerability":"VCID-6wyz-uw9f-uufq"},{"vulnerability":"VCID-81tn-964g-nqhe"},{"vulnerability":"VCID-8vsd-ed8b-57ec"},{"vulnerability":"VCID-9hx2-c5ne-1yca"},{"vulnerability":"VCID-ahyj-sx5e-yfet"},{"vulnerability":"VCID-bjpa-j4py-vubs"},{"vulnerability":"VCID-bnux-7fjj-mua5"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dzem-3pkm-akgm"},{"vulnerability":"VCID-eda1-ec29-67h4"},{"vulnerability":"VCID-fu8m-c32c-8kam"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-mpqf-b4wu-aua6"},{"vulnerability":"VCID-pnx8-75mz-w7ab"},{"vulnerability":"VCID-qg51-wxa8-1ubu"},{"vulnerability":"VCID-s3vf-jvpc-77a6"},{"vulnerability":"VCID-sjer-5du4-3qft"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.26.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/936800?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.26.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2h4w-tk7x-zfa3"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-39jy-pv24-z7bu"},{"vulnerability":"VCID-3fm1-2zb6-dqd9"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-6u34-vs68-c3eq"},{"vulnerability":"VCID-6wyz-uw9f-uufq"},{"vulnerability":"VCID-81tn-964g-nqhe"},{"vulnerability":"VCID-8vsd-ed8b-57ec"},{"vulnerability":"VCID-9hx2-c5ne-1yca"},{"vulnerability":"VCID-ahyj-sx5e-yfet"},{"vulnerability":"VCID-bjpa-j4py-vubs"},{"vulnerability":"VCID-bnux-7fjj-mua5"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dzem-3pkm-akgm"},{"vulnerability":"VCID-eda1-ec29-67h4"},{"vulnerability":"VCID-fu8m-c32c-8kam"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-mpqf-b4wu-aua6"},{"vulnerability":"VCID-pnx8-75mz-w7ab"},{"vulnerability":"VCID-qg51-wxa8-1ubu"},{"vulnerability":"VCID-s3vf-jvpc-77a6"},{"vulnerability":"VCID-sjer-5du4-3qft"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.26.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/936801?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.26.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2h4w-tk7x-zfa3"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-39jy-pv24-z7bu"},{"vulnerability":"VCID-3fm1-2zb6-dqd9"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-6u34-vs68-c3eq"},{"vulnerability":"VCID-6wyz-uw9f-uufq"},{"vulnerability":"VCID-81tn-964g-nqhe"},{"vulnerability":"VCID-8vsd-ed8b-57ec"},{"vulnerability":"VCID-9hx2-c5ne-1yca"},{"vulnerability":"VCID-ahyj-sx5e-yfet"},{"vulnerability":"VCID-bjpa-j4py-vubs"},{"vulnerability":"VCID-bnux-7fjj-mua5"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dzem-3pkm-akgm"},{"vulnerability":"VCID-eda1-ec29-67h4"},{"vulnerability":"VCID-fu8m-c32c-8kam"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-mpqf-b4wu-aua6"},{"vulnerability":"VCID-pnx8-75mz-w7ab"},{"vulnerability":"VCID-qg51-wxa8-1ubu"},{"vulnerability":"VCID-s3vf-jvpc-77a6"},{"vulnerability":"VCID-sjer-5du4-3qft"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.26.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/936802?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.26.3.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2h4w-tk7x-zfa3"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-39jy-pv24-z7bu"},{"vulnerability":"VCID-3fm1-2zb6-dqd9"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-6u34-vs68-c3eq"},{"vulnerability":"VCID-6wyz-uw9f-uufq"},{"vulnerability":"VCID-81tn-964g-nqhe"},{"vulnerability":"VCID-8vsd-ed8b-57ec"},{"vulnerability":"VCID-9hx2-c5ne-1yca"},{"vulnerability":"VCID-ahyj-sx5e-yfet"},{"vulnerability":"VCID-bjpa-j4py-vubs"},{"vulnerability":"VCID-bnux-7fjj-mua5"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dzem-3pkm-akgm"},{"vulnerability":"VCID-eda1-ec29-67h4"},{"vulnerability":"VCID-fu8m-c32c-8kam"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-mpqf-b4wu-aua6"},{"vulnerability":"VCID-pnx8-75mz-w7ab"},{"vulnerability":"VCID-qg51-wxa8-1ubu"},{"vulnerability":"VCID-s3vf-jvpc-77a6"},{"vulnerability":"VCID-sjer-5du4-3qft"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.26.3.1"},{"url":"http://public2.vulnerablecode.io/api/packages/936803?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.26.3.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2h4w-tk7x-zfa3"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-39jy-pv24-z7bu"},{"vulnerability":"VCID-3fm1-2zb6-dqd9"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-6u34-vs68-c3eq"},{"vulnerability":"VCID-6wyz-uw9f-uufq"},{"vulnerability":"VCID-81tn-964g-nqhe"},{"vulnerability":"VCID-8vsd-ed8b-57ec"},{"vulnerability":"VCID-9hx2-c5ne-1yca"},{"vulnerability":"VCID-ahyj-sx5e-yfet"},{"vulnerability":"VCID-bjpa-j4py-vubs"},{"vulnerability":"VCID-bnux-7fjj-mua5"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dzem-3pkm-akgm"},{"vulnerability":"VCID-eda1-ec29-67h4"},{"vulnerability":"VCID-fu8m-c32c-8kam"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-mpqf-b4wu-aua6"},{"vulnerability":"VCID-pnx8-75mz-w7ab"},{"vulnerability":"VCID-qg51-wxa8-1ubu"},{"vulnerability":"VCID-s3vf-jvpc-77a6"},{"vulnerability":"VCID-sjer-5du4-3qft"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.26.3.2"},{"url":"http://public2.vulnerablecode.io/api/packages/936804?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.26.3.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2h4w-tk7x-zfa3"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-39jy-pv24-z7bu"},{"vulnerability":"VCID-3fm1-2zb6-dqd9"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-6u34-vs68-c3eq"},{"vulnerability":"VCID-6wyz-uw9f-uufq"},{"vulnerability":"VCID-81tn-964g-nqhe"},{"vulnerability":"VCID-8vsd-ed8b-57ec"},{"vulnerability":"VCID-9hx2-c5ne-1yca"},{"vulnerability":"VCID-ahyj-sx5e-yfet"},{"vulnerability":"VCID-bjpa-j4py-vubs"},{"vulnerability":"VCID-bnux-7fjj-mua5"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dzem-3pkm-akgm"},{"vulnerability":"VCID-eda1-ec29-67h4"},{"vulnerability":"VCID-fu8m-c32c-8kam"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-mpqf-b4wu-aua6"},{"vulnerability":"VCID-pnx8-75mz-w7ab"},{"vulnerability":"VCID-qg51-wxa8-1ubu"},{"vulnerability":"VCID-s3vf-jvpc-77a6"},{"vulnerability":"VCID-sjer-5du4-3qft"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.26.3.3"},{"url":"http://public2.vulnerablecode.io/api/packages/936805?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.26.3.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2h4w-tk7x-zfa3"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-39jy-pv24-z7bu"},{"vulnerability":"VCID-3fm1-2zb6-dqd9"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-6u34-vs68-c3eq"},{"vulnerability":"VCID-6wyz-uw9f-uufq"},{"vulnerability":"VCID-81tn-964g-nqhe"},{"vulnerability":"VCID-8vsd-ed8b-57ec"},{"vulnerability":"VCID-9hx2-c5ne-1yca"},{"vulnerability":"VCID-ahyj-sx5e-yfet"},{"vulnerability":"VCID-bjpa-j4py-vubs"},{"vulnerability":"VCID-bnux-7fjj-mua5"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dzem-3pkm-akgm"},{"vulnerability":"VCID-eda1-ec29-67h4"},{"vulnerability":"VCID-fu8m-c32c-8kam"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-mpqf-b4wu-aua6"},{"vulnerability":"VCID-pnx8-75mz-w7ab"},{"vulnerability":"VCID-qg51-wxa8-1ubu"},{"vulnerability":"VCID-s3vf-jvpc-77a6"},{"vulnerability":"VCID-sjer-5du4-3qft"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.26.3.4"},{"url":"http://public2.vulnerablecode.io/api/packages/936806?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.27.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2h4w-tk7x-zfa3"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-39jy-pv24-z7bu"},{"vulnerability":"VCID-3fm1-2zb6-dqd9"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-6u34-vs68-c3eq"},{"vulnerability":"VCID-6wyz-uw9f-uufq"},{"vulnerability":"VCID-81tn-964g-nqhe"},{"vulnerability":"VCID-8vsd-ed8b-57ec"},{"vulnerability":"VCID-9hx2-c5ne-1yca"},{"vulnerability":"VCID-ahyj-sx5e-yfet"},{"vulnerability":"VCID-bjpa-j4py-vubs"},{"vulnerability":"VCID-bnux-7fjj-mua5"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dzem-3pkm-akgm"},{"vulnerability":"VCID-eda1-ec29-67h4"},{"vulnerability":"VCID-fu8m-c32c-8kam"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-mpqf-b4wu-aua6"},{"vulnerability":"VCID-pnx8-75mz-w7ab"},{"vulnerability":"VCID-qg51-wxa8-1ubu"},{"vulnerability":"VCID-s3vf-jvpc-77a6"},{"vulnerability":"VCID-sjer-5du4-3qft"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.27.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/936807?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.28.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2h4w-tk7x-zfa3"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-39jy-pv24-z7bu"},{"vulnerability":"VCID-3fm1-2zb6-dqd9"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-6u34-vs68-c3eq"},{"vulnerability":"VCID-6wyz-uw9f-uufq"},{"vulnerability":"VCID-81tn-964g-nqhe"},{"vulnerability":"VCID-8vsd-ed8b-57ec"},{"vulnerability":"VCID-9hx2-c5ne-1yca"},{"vulnerability":"VCID-ahyj-sx5e-yfet"},{"vulnerability":"VCID-bjpa-j4py-vubs"},{"vulnerability":"VCID-bnux-7fjj-mua5"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dzem-3pkm-akgm"},{"vulnerability":"VCID-eda1-ec29-67h4"},{"vulnerability":"VCID-fu8m-c32c-8kam"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-mpqf-b4wu-aua6"},{"vulnerability":"VCID-pnx8-75mz-w7ab"},{"vulnerability":"VCID-qg51-wxa8-1ubu"},{"vulnerability":"VCID-s3vf-jvpc-77a6"},{"vulnerability":"VCID-sjer-5du4-3qft"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.28.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/936808?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.28.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2h4w-tk7x-zfa3"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-39jy-pv24-z7bu"},{"vulnerability":"VCID-3fm1-2zb6-dqd9"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-6u34-vs68-c3eq"},{"vulnerability":"VCID-6wyz-uw9f-uufq"},{"vulnerability":"VCID-81tn-964g-nqhe"},{"vulnerability":"VCID-8vsd-ed8b-57ec"},{"vulnerability":"VCID-9hx2-c5ne-1yca"},{"vulnerability":"VCID-ahyj-sx5e-yfet"},{"vulnerability":"VCID-bjpa-j4py-vubs"},{"vulnerability":"VCID-bnux-7fjj-mua5"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dzem-3pkm-akgm"},{"vulnerability":"VCID-eda1-ec29-67h4"},{"vulnerability":"VCID-fu8m-c32c-8kam"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-mpqf-b4wu-aua6"},{"vulnerability":"VCID-pnx8-75mz-w7ab"},{"vulnerability":"VCID-qg51-wxa8-1ubu"},{"vulnerability":"VCID-s3vf-jvpc-77a6"},{"vulnerability":"VCID-sjer-5du4-3qft"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.28.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/936809?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.28.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2h4w-tk7x-zfa3"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-39jy-pv24-z7bu"},{"vulnerability":"VCID-3fm1-2zb6-dqd9"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-6u34-vs68-c3eq"},{"vulnerability":"VCID-6wyz-uw9f-uufq"},{"vulnerability":"VCID-81tn-964g-nqhe"},{"vulnerability":"VCID-8vsd-ed8b-57ec"},{"vulnerability":"VCID-9hx2-c5ne-1yca"},{"vulnerability":"VCID-ahyj-sx5e-yfet"},{"vulnerability":"VCID-bjpa-j4py-vubs"},{"vulnerability":"VCID-bnux-7fjj-mua5"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dzem-3pkm-akgm"},{"vulnerability":"VCID-eda1-ec29-67h4"},{"vulnerability":"VCID-fu8m-c32c-8kam"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-mpqf-b4wu-aua6"},{"vulnerability":"VCID-pnx8-75mz-w7ab"},{"vulnerability":"VCID-qg51-wxa8-1ubu"},{"vulnerability":"VCID-s3vf-jvpc-77a6"},{"vulnerability":"VCID-sjer-5du4-3qft"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.28.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/985420?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.28.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2h4w-tk7x-zfa3"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-39jy-pv24-z7bu"},{"vulnerability":"VCID-3fm1-2zb6-dqd9"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-6u34-vs68-c3eq"},{"vulnerability":"VCID-81tn-964g-nqhe"},{"vulnerability":"VCID-8vsd-ed8b-57ec"},{"vulnerability":"VCID-9hx2-c5ne-1yca"},{"vulnerability":"VCID-ahyj-sx5e-yfet"},{"vulnerability":"VCID-bjpa-j4py-vubs"},{"vulnerability":"VCID-bnux-7fjj-mua5"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dzem-3pkm-akgm"},{"vulnerability":"VCID-eda1-ec29-67h4"},{"vulnerability":"VCID-fu8m-c32c-8kam"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-pnx8-75mz-w7ab"},{"vulnerability":"VCID-qg51-wxa8-1ubu"},{"vulnerability":"VCID-s3vf-jvpc-77a6"},{"vulnerability":"VCID-sjer-5du4-3qft"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.28.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/985421?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.28.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2h4w-tk7x-zfa3"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-39jy-pv24-z7bu"},{"vulnerability":"VCID-3fm1-2zb6-dqd9"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-6u34-vs68-c3eq"},{"vulnerability":"VCID-81tn-964g-nqhe"},{"vulnerability":"VCID-8vsd-ed8b-57ec"},{"vulnerability":"VCID-9hx2-c5ne-1yca"},{"vulnerability":"VCID-ahyj-sx5e-yfet"},{"vulnerability":"VCID-bjpa-j4py-vubs"},{"vulnerability":"VCID-bnux-7fjj-mua5"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dzem-3pkm-akgm"},{"vulnerability":"VCID-eda1-ec29-67h4"},{"vulnerability":"VCID-fu8m-c32c-8kam"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-pnx8-75mz-w7ab"},{"vulnerability":"VCID-qg51-wxa8-1ubu"},{"vulnerability":"VCID-s3vf-jvpc-77a6"},{"vulnerability":"VCID-sjer-5du4-3qft"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.28.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/985422?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.31.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.31.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/995722?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.31.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dsph-q7jr-qudx"},{"vulnerability":"VCID-j55m-zv1d-17d1"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.31.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/995723?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.31.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dsph-q7jr-qudx"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.31.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/995724?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.31.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-11fm-qbca-63av"},{"vulnerability":"VCID-1s93-2pus-xkax"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-2t9v-rkcs-tfej"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-5nz8-yd66-eydx"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dsph-q7jr-qudx"},{"vulnerability":"VCID-kywk-3uny-eydr"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"},{"vulnerability":"VCID-ujj3-vskq-wqbd"},{"vulnerability":"VCID-vpat-qnms-c3gb"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.31.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/999590?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.31.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-11ah-ukzq-k7ch"},{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-dq3s-2u24-skhq"},{"vulnerability":"VCID-dsph-q7jr-qudx"},{"vulnerability":"VCID-tfxq-7v9w-p3ff"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.31.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/1025730?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.31.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-dsph-q7jr-qudx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.31.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/1030842?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.31.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-48sm-mr7f-ducd"},{"vulnerability":"VCID-dsph-q7jr-qudx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.31.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/374281?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.31.7%2B0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-dsph-q7jr-qudx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.31.7%252B0"},{"url":"http://public2.vulnerablecode.io/api/packages/1030843?format=json","purl":"pkg:composer/ci4-cms-erp/ci4ms@0.31.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-28yh-hjbw-w7ce"},{"vulnerability":"VCID-dsph-q7jr-qudx"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/ci4-cms-erp/ci4ms@0.31.7.0"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2026-41891","reference_id":"","reference_type":"","scores":[{"value":"0.00016","scoring_system":"epss","scoring_elements":"0.04101","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00016","scoring_system":"epss","scoring_elements":"0.041","published_at":"2026-06-14T12:55:00Z"},{"value":"0.00016","scoring_system":"epss","scoring_elements":"0.0409","published_at":"2026-06-13T12:55:00Z"},{"value":"0.00016","scoring_system":"epss","scoring_elements":"0.04083","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-41891"},{"reference_url":"https://github.com/ci4-cms-erp/ci4ms","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ci4-cms-erp/ci4ms"},{"reference_url":"https://github.com/ci4-cms-erp/ci4ms/commit/2f38284281ce6b435ea42003951f14109ac2cea7","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/ci4-cms-erp/ci4ms/commit/2f38284281ce6b435ea42003951f14109ac2cea7"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41891","reference_id":"","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41891"},{"reference_url":"https://github.com/ci4-cms-erp/ci4ms/releases/tag/0.31.8.0","reference_id":"0.31.8.0","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-07T12:47:29Z/"}],"url":"https://github.com/ci4-cms-erp/ci4ms/releases/tag/0.31.8.0"},{"reference_url":"https://github.com/advisories/GHSA-5hfv-c864-qcq9","reference_id":"GHSA-5hfv-c864-qcq9","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-5hfv-c864-qcq9"},{"reference_url":"https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-5hfv-c864-qcq9","reference_id":"GHSA-5hfv-c864-qcq9","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"5.3","scoring_system":"cvssv4","scoring_elements":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-07T12:47:29Z/"}],"url":"https://github.com/ci4-cms-erp/ci4ms/security/advisories/GHSA-5hfv-c864-qcq9"}],"weaknesses":[{"cwe_id":613,"name":"Insufficient Session Expiration","description":"According to WASC, Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"4.0 - 6.9","exploitability":"0.5","weighted_severity":"6.2","risk_score":3.1,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-28yh-hjbw-w7ce"}