HIGH7.5Packagist
GHSA-592m-4533-rxq9· BIT-silverstripe-2020-9280, CVE-2020-9280SilverStripe Folders migrated from 3.x may be unsafe to upload to
Modified: 4/25/2024
package
Packagist/silverstripe/assets
pkg:packagist/silverstripe/assets
MEDIUM5.4Packagist
GHSA-9cx2-hj6m-fv58· CVE-2022-38724Silverstripe XSS in shortcodes
Modified: 4/29/2025
MEDIUM5.3Packagist
GHSA-jgcf-rf45-2f8v· CVE-2026-24749Silverstripe Assets Module has a DBFile::getURL() permission bypass
Modified: 5/5/2026
MEDIUM5.3Packagist
GHSA-jvx5-rm6q-gx7p· CVE-2019-12245Lack of access control on upoaded files
Modified: 2/16/2024
MEDIUM4.3Packagist
GHSA-v68g-62v9-39w5· CVE-2022-29858Unpublished, protected files can be published via shortcode
Modified: 2/21/2024
MEDIUM5.4Packagist
GHSA-vv3r-fxqp-vr3f· CVE-2022-38147XSS via uploaded gpx file
Modified: 2/20/2024