HIGH7.1Packagist
GHSA-67c6-q4j4-hccg· CVE-2023-40033Flarum vulnerable to LFI and Blind SSRF via Avatar upload
Modified: 9/10/2026
package
Packagist/flarum/framework
pkg:packagist/flarum/framework
MEDIUM6.5Packagist
GHSA-733r-8xcp-w9mr· CVE-2024-21641Flarum's logout Route allows open redirects
Modified: 9/10/2026
MEDIUM6.8Packagist
GHSA-hg9j-64wp-m9px· CVE-2025-27794Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite
Modified: 3/12/2025
MEDIUM5.3Packagist
GHSA-p6m5-x83r-hqmr· CVE-2018-19133Flarum Core Leaks PII
Modified: 2/16/2024