Headless CMS for managing and publishing hybrid static, web component driven sites.
100%
Total Score
100
100
100
| Title | Versions | Severity |
|---|---|---|
CVE-2025-49138 elmsln/haxcms is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 11.0.0. | 0.0.0 - 11.0.0 | Medium |
CVE-2025-49137 elmsln/haxcms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 11.0.0. | 0.0.0 - 11.0.0 | High |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
twig/twig Version ^2.0 | — | — |
guzzlehttp/guzzle Version ^6.3 | — | — |
symfony/filesystem Version ^4.2 | — | — |
gumlet/php-image-resize Version ^1.9 | — | — |
icamys/php-sitemap-generator Version ^1.0 | — | — |
Secure your code, cloud, and runtime environments in one central system. Find and fix vulnerabilities automatically.
No credit card required | Scan results in 32secs.
SOC 2Compliant
ISO 27001Compliant