Delightfully simple forum software.
92%
Total Score
75
100
100
| Title | Versions | Severity |
|---|---|---|
CVE-2025-27794 flarum/core is vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in versions 0.0.0 - 1.8.10. | 0.0.0 - 1.8.10 | Medium |
CVE-2024-21641 flarum/core is vulnerable to URL Redirection to Untrusted Site ('Open Redirect') in versions 0.0.0 - 1.8.5. | 0.0.0 - 1.8.5 | Medium |
CVE-2023-40033 flarum/core is vulnerable to Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') in versions 0.0.0 - 1.8.0. | 0.0.0 - 1.8.0 | High |
CVE-2023-27577 flarum/core is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 1.7.0. | 0.0.0 - 1.7.0 | Medium |
CVE-2023-22489 flarum/core is vulnerable to Missing Authorization in versions 1.3.0 - 1.6.3. | 1.3.0 - 1.6.3 | Low |
| Dependency | Last Release | Score |
|---|---|---|
symfony/yaml Version ^4.3.4 | — | — |
axy/sourcemap Version ^0.1.4 | — | — |
doctrine/dbal Version ^2.7 | — | — |
nesbot/carbon Version ^2.0 | — | — |
illuminate/bus Version ^6.0 | — | — |
Secure your code, cloud, and runtime environments in one central system. Find and fix vulnerabilities automatically.
No credit card required | Scan results in 32secs.
SOC 2Compliant
ISO 27001Compliant