pkg:Packagist/idno/known

All known vulnerabilities

• CRITICAL9.8CVE-2026-26273Known affected by Account Takeover via Password Reset Token Leakage
  from 0, < 1.6.3
• HIGH8.8CVE-2022-33011Known vulnerable to account takeover via host header injection attack in v1.3.1
  from 0, <= 1.3.1
• MEDIUM6.1CVE-2022-32115Known vulnerable to code execution via SVG file in v1.3.1
  from 0, <= 1.3.1
• MEDIUM5.4Known v1.3.1 Cross-site Scripting
  from 0, <= 1.3.1
• MEDIUM4.3Known v1.3.1 contains Insecure Direct Object Reference
  from 0, <= 1.3.1
• —Idno Vulnerable to Remote Code Execution via Chained Import File Write and Template Path Traversal
  from 0, < 1.6.4
• —Idno Vulnerable to Unauthenticated SSRF via URL Unfurl Endpoint
  from 0, < 1.6.4