ipl/web
Packagist2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting ipl/webpage 1 of 1
- CVE-2024-41811LOWCVSS 3.9EG 3.9fixed in 0.10.12024-08-05
vulnerable: v0.1.0 ... v0.9.2 (14 versions)
ipl/web is a set of common web components for php projects. Some of the recent development by Icinga is, under certain circumstances, susceptible to cross site request forgery. (CSRF). All affected products, in any version, will be unaffec…
- CVE-2026-42224HIGHCVSS 7.6EG 7.6fixed in 0.13.1 or 0.10.3, by version range2026-05-08
vulnerable: v0.1.0 ... v0.9.2 (16 versions)
ipl/web is a set of common web components for php projects. Prior to versions 0.13.1 and 0.10.3, the vulnerability allows an attacker to inject malicious Javascript into a victim's browser to run it in the context of Icinga Web. The victim…
Check whether ipl/web is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for ipl/web CVEs against the assets you own.
Book a Demo →