getkirby/kirby Security Advisories for 2.5.4 (2)
-
[MEDIUM] Kirby vulnerable to path traversal of snippet names in the `snippet()` helper
PKSA-s88c-j7zs-83qs CVE-2025-30159 GHSA-fw82-87p8-v6hp
Affected version: >=4.0.0,<4.7.1|>=3.10.0,<3.10.1.2|<3.9.8.3
Reported by:
GitHub -
[MEDIUM] Kirby XSS Vulnerability
PKSA-z174-kcbf-g6vr CVE-2018-16630 GHSA-3gq5-r59m-mmv2
Affected version: <=2.5.12
Reported by:
GitHub