HIGH7.5Packagist
GHSA-592m-4533-rxq9· BIT-silverstripe-2020-9280, CVE-2020-9280SilverStripe Folders migrated from 3.x may be unsafe to upload to
Modified: 4/25/2024
package
pkg:packagist/silverstripe/assets
SilverStripe Folders migrated from 3.x may be unsafe to upload to
Modified: 4/25/2024
Silverstripe XSS in shortcodes
Modified: 4/29/2025
Silverstripe Assets Module has a DBFile::getURL() permission bypass
Modified: 5/5/2026
Lack of access control on upoaded files
Modified: 2/16/2024
Unpublished, protected files can be published via shortcode
Modified: 2/21/2024
XSS via uploaded gpx file
Modified: 2/20/2024