CVE-2026-34372
1 advisory.
Packagist/sulu/sulu CVE-2026-34372: medium
Sulu checks fix permissions for subentities endpoints
Action: Upgrade sulu/sulu to 2.6.22 or later.
composer require sulu/sulu:2.6.22composer require sulu/sulu:3.0.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 2.6.22 | - |
| 3.0.0 | 3.0.5 | - |
Fixed versions
| 2.6.22 | 3.0.5 |
Sources
- osv: GHSA-6h7h-m7p5-hjqp
- https://github.com/sulu/sulu/security/advisories/GHSA-6h7h-m7p5-hjqp
- https://nvd.nist.gov/vuln/detail/CVE-2026-34372
- https://github.com/sulu/sulu
- https://github.com/sulu/sulu/releases/tag/2.6.22
- https://github.com/sulu/sulu/releases/tag/3.0.5
CVE-2026-34372 · published · modified · JSON