dapphp/securimage

Packagist1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting dapphp/securimagepage 1 of 1

CVE-2017-14077MEDIUMCVSS 6.1EG 6.1✓ Fixed in 3.6.6
2017-11-18
vulnerable: 3.5.4 ... 3.6.5 (7 versions)
HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $_SERVER['HTTP_USER_AGENT'] parameter to example_form.ajax.php or example_form.php.

Check whether dapphp/securimage is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for dapphp/securimage CVEs against the assets you own.

Start Free Scan →