Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/silverstripe/assets@1.11.1
purl pkg:composer/silverstripe/assets@1.11.1
Next non-vulnerable version 2.4.5
Latest non-vulnerable version 3.1.3
Risk score 2.4
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-jgcf-rf45-2f8v
Aliases:
CVE-2026-24749
Silverstripe Assets Module has a DBFile::getURL() permission bypass ### Impact Images rendered in templates or otherwise accessed via `DBFile::getURL()` or …
2.4.5
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-vv3r-fxqp-vr3f
XSS via uploaded gpx file A malicious content author could upload a GPX file with a Javascript payload. The payload … CVE-2022-38147
GMS-2022-6854
GHSA-9cx2-hj6m-fv58
Silverstripe XSS in shortcodes A malicious content author could add arbitrary attributes to HTML editor shortcodes which could be used … CVE-2022-38724
GMS-2022-6853