The Kirby core
100%
Total Score
100
100
100
| Title | Versions | Severity |
|---|---|---|
CVE-2026-21896 getkirby/cms is vulnerable to Incorrect Authorization in versions 5.0.0 - 5.2.1. | 5.0.0 - 5.2.1 | Medium |
CVE-2025-65012 getkirby/cms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 5.0.0 - 5.1.4. | 5.0.0 - 5.1.4 | Medium |
CVE-2025-30207 getkirby/cms is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 3.9.8.3, 3.10.0 - 3.10.1.2 and 4.0.0 - 4.7.1. | 0.0.0 - 3.9.8.33.10.0 - 3.10.1.24.0.0 - 4.7.1 | Low |
CVE-2025-31493 getkirby/cms is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 3.9.8.3, 3.10.0 - 3.10.1.2 and 4.0.0 - 4.7.1. | 0.0.0 - 3.9.8.33.10.0 - 3.10.1.24.0.0 - 4.7.1 | Medium |
CVE-2024-41964 getkirby/cms is vulnerable to Incorrect Authorization in versions 0.0.0 - 3.6.6.5, 3.7.0 - 3.7.5.4, 3.8.0 - 3.8.4.3, 3.9.0 - 3.9.8.1, 3.10.0 - 3.10.1 and 4.0.0 - 4.3.0. | 0.0.0 - 3.6.6.53.7.0 - 3.7.5.43.8.0 - 3.8.4.3 +3 more | High |
| Dependency | Last Release | Score |
|---|---|---|
filp/whoops Version 2.18.4 | — | — |
symfony/yaml Version 7.4.1 | — | — |
composer/semver Version 3.4.4 | — | — |
phpmailer/phpmailer Version 7.0.2 | — | — |
claviska/simpleimage Version 4.4.0 | — | — |
Secure your code, cloud, and runtime environments in one central system. Find and fix vulnerabilities automatically.
No credit card required | Scan results in 32secs.
SOC 2Compliant
ISO 27001Compliant