MEDIUM5.2Packagist
GHSA-94vp-rmqv-5875· CVE-2020-15247Twig Sandbox Escape by authenticated users with access to editing CMS templates when safemode is enabled.
Modified: 9/10/2026
package
Packagist/october/cms
pkg:packagist/october/cms
LOW3.4Packagist
GHSA-9722-rr68-rfpg· CVE-2020-5297Upload whitelisted files to any directory in OctoberCMS
Modified: 7/8/2026
MEDIUM5.2Packagist
GHSA-fcr8-6q7r-m4wg· CVE-2021-21264Bypass of fix for CVE-2020-26231, Twig sandbox escape
Modified: 7/8/2026
MEDIUM6.2Packagist
GHSA-jv6v-fvvx-4932· CVE-2020-5296Arbitrary File Deletion vulnerability in OctoberCMS
Modified: 7/8/2026
HIGH7.2Packagist
GHSA-q263-j3q9-g964· CVE-2017-1000119October CMS PHP Code Execution
Modified: 2/16/2024
MEDIUM4.8Packagist
GHSA-r23f-c2j5-rx2f· CVE-2020-5295Local File read vulnerability in OctoberCMS
Modified: 9/10/2026
MEDIUM5.2Packagist
GHSA-r89v-cgv7-3jhx· CVE-2020-26231Bypass of fix for CVE-2020-15247, Twig sandbox escape
Modified: 9/10/2026
HIGH7.5Packagist
GHSA-xwjr-6fj7-fc6h· CVE-2020-15246Local File Inclusion by unauthenticated users
Modified: 7/8/2026