Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/silverstripe/framework@4.0.3-rc1
purl pkg:composer/silverstripe/framework@4.0.3-rc1
Tags Ghost
Next non-vulnerable version 6.2.2
Latest non-vulnerable version 6.2.2
Risk score 4.0
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-vh7q-j8p5-2h4h

silverstripe/framework sends passwords back to browsers under some circumstances Under some circumstances a form may populate a PasswordField with submitted …
4.0.4
Vulnerable
GHSA-vgxh-x8jv-hmff

silverstripe/framework code execution vulnerability There is a vulnerability whereby arbitrary global functions may be executed if malicious user input is …
4.0.4
Vulnerable
GHSA-vcg6-8fxc-x5cq

silverstripe/framework allows upload of dangerous file types Some potentially dangerous file types exist in File.allowed_extensions which could allow a malicious …
4.0.4
Vulnerable
This package is not known to fix any advisories.