Packagist/ezsystems/ezplatform-kernel

Object state limitation has no effect

Modified: 8/6/2025

eZ Platform Object Injection in SiteAccessMatchListener

Modified: 11/29/2024

Login timing attack in ezsystems/ezplatform-kernel

Modified: 2/4/2026

Timing attack in eZ Platform Ibexa

Modified: 3/4/2025

eZ Platform users with the Company admin role can assign any role to any user

Modified: 2/4/2026

Ibexa ezplatform-kernel download route allows filename change

Modified: 11/28/2024

Cross-site scripting in eZ Platform Kernel

Modified: 5/4/2026

Ibexa Kernel's files with blacklisted extensions can be still saved to drafts

Modified: 11/29/2024

Company admin role gives excessive privileges in eZ Platform Ibexa

Modified: 3/4/2025

Exposure of Resource to Wrong Sphere in ezsystems/ezplatform-kernel

Modified: 2/16/2024