HIGHPackagist
GHSA-37j7-56xc-c468· CVE-2026-28507Idno Vulnerable to Remote Code Execution via Chained Import File Write and Template Path Traversal
Modified: 3/6/2026
package
Packagist/idno/known
pkg:packagist/idno/known
MEDIUM4.3Packagist
GHSA-4v4p-87m3-5423· CVE-2022-30852Known v1.3.1 contains Insecure Direct Object Reference
Modified: 2/21/2024
MEDIUM6.1Packagist
GHSA-5jgj-h9wp-53fr· CVE-2022-32115Known vulnerable to code execution via SVG file in v1.3.1
Modified: 2/21/2024
CRITICAL9.8Packagist
GHSA-78wq-6gcv-w28r· CVE-2026-26273Known affected by Account Takeover via Password Reset Token Leakage
Modified: 2/13/2026
CRITICALPackagist
GHSA-fcrh-fqxh-6fx6· CVE-2026-28508Idno Vulnerable to Unauthenticated SSRF via URL Unfurl Endpoint
Modified: 3/6/2026
MEDIUM5.4Packagist
GHSA-g688-7j3c-h9f3· CVE-2022-31290Known v1.3.1 Cross-site Scripting
Modified: 2/21/2024
HIGH8.8Packagist
GHSA-p757-4v3p-j74f· CVE-2022-33011Known vulnerable to account takeover via host header injection attack in v1.3.1
Modified: 2/21/2024