HIGHPackagist
GHSA-37j7-56xc-c468· CVE-2026-28507Idno Vulnerable to Remote Code Execution via Chained Import File Write and Template Path Traversal
Modified: 3/6/2026
package
pkg:packagist/idno/known
Idno Vulnerable to Remote Code Execution via Chained Import File Write and Template Path Traversal
Modified: 3/6/2026
Known v1.3.1 contains Insecure Direct Object Reference
Modified: 2/21/2024
Known vulnerable to code execution via SVG file in v1.3.1
Modified: 2/21/2024
Known affected by Account Takeover via Password Reset Token Leakage
Modified: 2/13/2026
Idno Vulnerable to Unauthenticated SSRF via URL Unfurl Endpoint
Modified: 3/6/2026
Known v1.3.1 Cross-site Scripting
Modified: 2/21/2024
Known vulnerable to account takeover via host header injection attack in v1.3.1
Modified: 2/21/2024