Known Vulnerabilities for Assets by Silverstripe
Listed below are 2 of the newest known vulnerabilities associated with "Assets" by "Silverstripe".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-106103 json | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the i... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-105637 json | Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/views/as... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105631 json | Plane is an open-source project management tool. Prior to 1.4.0, WorkspaceFileAssetEndpoint.get and WorkspaceAssetDownloadEnd... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105628 json | Plane is an open-source project management tool. Prior to 1.4.0, Plane's OAuth avatar synchronization flow fetches avatar_url... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-105268 json | The Gitea API routes for issue attachments (`/api/v1/repos/{owner}/{repo}/issues/{index}/assets/{attachment_id}`) also accept... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-104975 json | Plane is an open-source project management tool. Prior to 1.4.0, Plane's dashboard asset endpoints in plane/app/views/asset/v... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104971 json | Plane is an open-source project management tool. Prior to 1.4.0, DuplicateAssetEndpoint fetches a source FileAsset without li... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104960 json | Plane is an open-source project management tool. Prior to 1.4.0, Plane exposes the workspace-scoped GET /api/assets/v2/worksp... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-100692 json | Hugo is a static site generator. In versions after v0.123.0 and before v0.166.0, Hugo's symlink confinement checks stopped at... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100690 json | Hugo versions from v0.161.0 through v0.165.0 run Node.js tools (css.PostCSS, css.TailwindCSS, js.Babel) under the Node.js per... | Not Provided | 2026-09-26 | 2026-09-30 |