Known Vulnerabilities for Framework by Flarum
Listed below are 10 of the newest known vulnerabilities associated with "Framework" by "Flarum".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-44643 json | Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an attacker... | Not Provided | 2026-05-11 | 2026-05-11 |
| CVE-2026-43432 json | In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhci_disable_slot() xhci_... | Not Provided | 2026-05-08 | 2026-05-11 |
| CVE-2026-43227 json | In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/sh_tmu: Always leave device running ... | Not Provided | 2026-05-06 | 2026-05-07 |
| CVE-2026-42874 json | Microdot is a minimalistic Python web framework. Prior to 2.6.1, the Response.set_cookie() method does not sanitize its strin... | Not Provided | 2026-05-11 | 2026-05-11 |
| CVE-2026-42565 json | @workos/authkit-session is a toolkit for building WorkOS AuthKit framework integrations. Prior to 0.5.1, an open redirect vul... | Not Provided | 2026-05-11 | 2026-05-11 |
| CVE-2026-42554 json | Fiber is a web framework for Go. Prior to 2.52.12 and 3.1.0, Cross-Site Scripting vulnerability in Go Fiber allows a remote a... | Not Provided | 2026-05-11 | 2026-05-11 |
| CVE-2026-42475 json | SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `on` array to the joinOn function in BuildHelper.... | Not Provided | 2026-05-01 | 2026-05-01 |
| CVE-2026-42474 json | SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted `data` array to the data function in BuildHelper.... | Not Provided | 2026-05-01 | 2026-05-01 |
| CVE-2026-42473 json | Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize() on... | Not Provided | 2026-05-01 | 2026-05-01 |
| CVE-2026-42472 json | Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize() on... | Not Provided | 2026-05-01 | 2026-05-01 |