pkg:Packagist/idno/known

7 total CVEsCRITICAL1HIGH1MEDIUM3

✅ Check your installed version

All known vulnerabilities

  • CRITICAL9.8CVE-2026-26273Known affected by Account Takeover via Password Reset Token Leakage
    from 0, < 1.6.3
  • HIGH8.8CVE-2022-33011Known vulnerable to account takeover via host header injection attack in v1.3.1
    from 0, <= 1.3.1
  • MEDIUM6.1CVE-2022-32115Known vulnerable to code execution via SVG file in v1.3.1
    from 0, <= 1.3.1
  • MEDIUM5.4CVE-2022-31290Known v1.3.1 Cross-site Scripting
    from 0, <= 1.3.1
  • MEDIUM4.3CVE-2022-30852Known v1.3.1 contains Insecure Direct Object Reference
    from 0, <= 1.3.1
  • —CVE-2026-28507Idno Vulnerable to Remote Code Execution via Chained Import File Write and Template Path Traversal
    from 0, < 1.6.4
  • —CVE-2026-28508Idno Vulnerable to Unauthenticated SSRF via URL Unfurl Endpoint
    from 0, < 1.6.4