The Kirby core
100%
Total Score
100
100
100
| Title | Versions | Severity |
|---|---|---|
CVE-2026-45368 getkirby/cms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 4.9.0 and 5.0.0 - 5.4.0. | 0.0.0 - 4.9.05.0.0 - 5.4.0 | High |
CVE-2026-45334 getkirby/cms is vulnerable to Missing Authorization in versions 0.0.0 - 4.9.0 and 5.0.0 - 5.4.0. | 0.0.0 - 4.9.05.0.0 - 5.4.0 | Medium |
CVE-2026-44177 getkirby/cms is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 5.3.0 - 5.4.0. | 5.3.0 - 5.4.0 | High |
CVE-2026-44176 getkirby/cms is vulnerable to Missing Authorization in versions 0.0.0 - 4.9.0 and 5.0.0 - 5.4.0. | 0.0.0 - 4.9.05.0.0 - 5.4.0 | Medium |
CVE-2026-44175 getkirby/cms is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 4.9.0 and 5.0.0 - 5.4.0. | 0.0.0 - 4.9.05.0.0 - 5.4.0 | High |
| Dependency | Last Release | Score |
|---|---|---|
filp/whoops Version 2.18.4 | — | — |
symfony/yaml Version 7.4.1 | — | — |
composer/semver Version 3.4.4 | — | — |
phpmailer/phpmailer Version 7.0.2 | — | — |
claviska/simpleimage Version 4.4.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

SOC 2Compliant
ISO 27001Compliant