Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/silverstripe/assets@1.13.8
purl pkg:composer/silverstripe/assets@1.13.8
Next non-vulnerable version 2.4.5
Latest non-vulnerable version 3.1.3
Risk score 2.4
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-jgcf-rf45-2f8v
Aliases:
CVE-2026-24749
Silverstripe Assets Module has a DBFile::getURL() permission bypass ### Impact Images rendered in templates or otherwise accessed via `DBFile::getURL()` or …
2.4.5
Not vulnerable
This package is not known to fix any advisories.