Packagist/mautic/grapes-js-builder-bundle CVE-2025-13827: high 8.8, EPSS 0.42%
GrapesJsBuilder File Upload allows all file uploads
Action: Upgrade mautic/grapes-js-builder-bundle to 4.4.18 or later.
composer require mautic/grapes-js-builder-bundle:4.4.18composer require mautic/grapes-js-builder-bundle:5.2.9composer require mautic/grapes-js-builder-bundle:6.0.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.4.18 | - |
| 5.0.0 | 5.2.9 | - |
| 6.0.0 | 6.0.7 | - |
Fixed versions
| 4.4.18 | 5.2.9 | 6.0.7 |
Sources
- osv: GHSA-5xw2-57jx-pgjp
- nvd: CVE-2025-13827
- https://github.com/mautic/mautic/security/advisories/GHSA-5xw2-57jx-pgjp
- https://github.com/mautic/mautic
CVE-2025-13827 · published · modified · JSON