Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/silverstripe/framework@3.6.5-rc1
purl pkg:composer/silverstripe/framework@3.6.5-rc1
Tags Ghost
Next non-vulnerable version 6.2.2
Latest non-vulnerable version 6.2.2
Risk score 4.0
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-vcg6-8fxc-x5cq

silverstripe/framework allows upload of dangerous file types Some potentially dangerous file types exist in File.allowed_extensions which could allow a malicious …
3.6.6
Vulnerable
This package is not known to fix any advisories.