HIGH7.1Packagist
GHSA-67c6-q4j4-hccg· CVE-2023-40033Flarum vulnerable to LFI and Blind SSRF via Avatar upload
Modified: 9/10/2026
package
pkg:packagist/flarum/framework
Flarum vulnerable to LFI and Blind SSRF via Avatar upload
Modified: 9/10/2026
Flarum's logout Route allows open redirects
Modified: 9/10/2026
Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite
Modified: 3/12/2025
Flarum Core Leaks PII
Modified: 2/16/2024