Packagist/devcode-it/openstamanager CVE-2026-35470: high 8.8, EPSS 0.49%

OpenSTAManager has a SQL Injection via righe Parameter in confronta_righe Modals

Action: Upgrade devcode-it/openstamanager to 2.10.2 or later.

composer require devcode-it/openstamanager:2.10.2

Affected

Fixed versions

Sources

• osv: GHSA-mmm5-3g4x-qw39
• https://github.com/devcode-it/openstamanager/security/advisories/GHSA-mmm5-3g4x-qw39
• https://github.com/devcode-it/openstamanager
• https://github.com/devcode-it/openstamanager/releases/tag/v2.10.2

CVE-2026-35470 · published 2026-04-03T21:57:08Z · modified 2026-04-03T22:11:30.904713Z · JSON