Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/silverstripe/framework@5.3.21
purl pkg:composer/silverstripe/framework@5.3.21
Next non-vulnerable version 6.2.2
Latest non-vulnerable version 6.2.2
Risk score 2.5
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-rhx4-hvx9-j387
Aliases:
CVE-2025-30148
Silverstripe Framework has a XSS vulnerability in HTML editor ### Impact A bad actor with access to edit content in …
5.3.23
Vulnerable
GHSA-256q-hx8w-xcqx

Silverstripe Framework user enumeration via timing attack on login and password reset forms ### Impact User enumeration is possible by …
5.3.23
Vulnerable
GHSA-gvrw-qqp5-jgc5
Aliases:
CVE-2026-54720
Silverstripe Framework: Possible XSS attack through media embed ### Impact The "Insert media from web" functionality in the CMS is …
6.2.2
Not vulnerable
This package is not known to fix any advisories.