CVE-2026-35168

Packagist/devcode-it/openstamanager CVE-2026-35168: high 8.8, EPSS 0.81%

OpenSTAManager: SQL Injection via Aggiornamenti Module

Action: Upgrade devcode-it/openstamanager to 2.10.2 or later.

composer require devcode-it/openstamanager:2.10.2

Affected

Fixed versions

Sources

• osv: GHSA-2fr7-cc4f-wh98
• https://github.com/devcode-it/openstamanager/security/advisories/GHSA-2fr7-cc4f-wh98
• https://nvd.nist.gov/vuln/detail/CVE-2026-35168
• https://github.com/devcode-it/openstamanager/commit/43970676bcd6636ff8663652fd82579f737abb74
• https://github.com/devcode-it/openstamanager
• https://github.com/devcode-it/openstamanager/releases/tag/v2.10.2

CVE-2026-35168 · published 2026-04-03T03:47:37Z · modified 2026-04-03T04:11:27.925992Z · JSON