Maven/org.craftercms:craftercms CVE-2026-1770: medium 4.5, EPSS 0.47%
Crafter CMS has Improper Control of Dynamically-Managed Code Resources
Action: Upgrade org.craftercms:craftercms to 4.5.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.5.0 | - |
Fixed versions
| 4.5.0 |
Sources
- osv: GHSA-gj28-gw7w-3pxc
- nvd: CVE-2026-1770
- https://docs.craftercms.org/current/security/advisory.html#cv-2026020201
- https://github.com/craftercms/craftercms
CVE-2026-1770 · published · modified · JSON