CVE-2026-100909
1 advisory.
Packagist/october/october CVE-2026-100909: low 3.9, EPSS 0.30%
October CMS: Incomplete Scheme Validation in Image Resizer
Action: Upgrade october/october to 4.3.5 or later.
composer require october/october:4.3.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.3.0 | 4.3.5 | - |
Fixed versions
| 4.3.5 |
Sources
- osv: GHSA-2xmm-m4wv-3fjh
- https://github.com/octobercms/october/security/advisories/GHSA-2xmm-m4wv-3fjh
- https://github.com/octobercms/october
CVE-2026-100909 · published · modified · JSON