MEDIUM6.1Packagist
GHSA-38vf-35cg-m73w· CVE-2023-41564Cockpit CMS arbitrary file upload vulnerability
Modified: 2/16/2024
package
Packagist/cockpit-hq/cockpit
pkg:packagist/cockpit-hq/cockpit
HIGH8.3Packagist
GHSA-3vf5-xm2p-6mh5· CVE-2023-4321Cockpit Cross-site Scripting vulnerability
Modified: 2/16/2024
HIGH8.8Packagist
GHSA-45g2-r339-pjwf· CVE-2023-37650Cockpit CMS Cross-Site Request Forgery vulnerability
Modified: 2/19/2024
HIGH8.1Packagist
GHSA-5cv4-48h7-7782· CVE-2023-4395Cockpit Cross-site Scripting vulnerability
Modified: 2/16/2024
MEDIUM6.3Packagist
GHSA-5pv2-86qj-5jf9· CVE-2026-6626Cockpit has NoSQL Injection Through Content Aggregation Pipelines
Modified: 4/23/2026
HIGH8.8Packagist
GHSA-6x8f-x6qw-qwx3· CVE-2023-1313cockpit-hq/cockpit is vulnerable to unrestricted file uploads
Modified: 11/8/2023
HIGH7.7Packagist
GHSA-7x5c-vfhj-9628· CVE-2026-31891Cockpit CMS has SQL Injection in MongoLite Aggregation Optimizer via toJsonExtractRaw()
Modified: 3/19/2026
HIGH8.8Packagist
GHSA-86rf-38v8-9c4x· CVE-2023-0759privilege chaining in cockpit-hq/cockpit
Modified: 11/8/2023
MEDIUM6.8Packagist
GHSA-8m65-qq6g-43rr· CVE-2023-4422Cockpit Cross-site Scripting vulnerability
Modified: 2/16/2024
HIGH8.8Packagist
GHSA-8wj3-cpmr-8whp· CVE-2022-2818Cockpit Content Platform vulnerable to 2FA bypass
Modified: 2/16/2024
HIGH7.5Packagist
GHSA-9r25-4j77-9wc7· CVE-2023-37649Cockpit CMS vulnerable to incorrect access control
Modified: 12/5/2024
MEDIUM5.4Packagist
GHSA-ch4j-vcf5-58x5· CVE-2026-23695Cockpit CMS: Stored cross-site scripting vulnerability in the Set field type's Display template option
Modified: 9/10/2026
HIGH8.3Packagist
GHSA-ff45-2jp9-69jc· CVE-2023-4433Cockpit Cross-site Scripting vulnerability
Modified: 2/16/2024
CRITICAL9.8Packagist
GHSA-fm6c-rhcf-7439· CVE-2026-38992Cockpit is vulnerable to arbitrary code execution
Modified: 5/6/2026
MEDIUM6.1Packagist
GHSA-g3mv-64h3-h482· CVE-2023-4451Cockpit Cross-site Scripting vulnerability
Modified: 2/16/2024
MEDIUM5.4Packagist
GHSA-gm7m-rqf8-jx4m· CVE-2023-0780Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit
Modified: 11/8/2023
HIGH8.8Packagist
GHSA-j2rx-4jg9-79mw· CVE-2026-38991Cockpit Vulnerable to Unrestricted Upload of File with Dangerous Type
Modified: 5/6/2026
LOW3.5Packagist
GHSA-j4rj-fgcq-wmqp· CVE-2025-7053Cockpit - Content Platform vulnerable to XSS through name or email argument names
Modified: 7/4/2025
MEDIUM6.5Packagist
GHSA-p46p-7pmj-m34f· CVE-2026-38993Cockpit is vulnerable to directory traversal
Modified: 5/6/2026
MEDIUM5.5Packagist
GHSA-p8cq-pv6w-6rwx· CVE-2023-1160Cockpit Uses Platform-Dependent Third Party Components
Modified: 11/8/2023
MEDIUM5.5Packagist
GHSA-q76r-7p4q-mqpw· CVE-2024-2001Cockpit CMS Cross-Site Scripting vulnerability
Modified: 2/29/2024
HIGH8.3Packagist
GHSA-rmgx-3w4r-xcfp· CVE-2023-4432Cockpit Cross-site Scripting vulnerability
Modified: 2/16/2024
CRITICAL9.8Packagist
GHSA-vpj8-xfqc-jcv9· CVE-2024-4825Cockpit CMS contains an arbitrary file upload vulenrability
Modified: 5/19/2024
HIGH8.3Packagist
GHSA-w3qm-93vf-5hrw· CVE-2023-4196Cockpit Cross-site Scripting vulnerability
Modified: 2/16/2024
HIGH7.5Packagist
GHSA-wp68-xrfg-xvq4· CVE-2025-1025Cockpit Arbitrary File Upload
Modified: 2/5/2025
CRITICAL9.9Packagist
GHSA-xcq3-7pf3-5jvc· CVE-2023-4195Cockpit PHP Remote File Inclusion vulnerability
Modified: 2/16/2024