CVE-2026-4175
1 advisory.
Packagist/aureuserp/aureuserp CVE-2026-4175: low 3.5
Aureus ERP vulnerable to cross-site scripting in the Chatter Message Handler
Action: Upgrade aureuserp/aureuserp to 1.3.0-BETA1 or later.
composer require aureuserp/aureuserp:1.3.0-BETA1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.0-BETA1 | - |
Fixed versions
| 1.3.0-BETA1 |
Sources
- osv: GHSA-76c2-3q6g-xvpm
- https://nvd.nist.gov/vuln/detail/CVE-2026-4175
- https://github.com/aureuserp/aureuserp/pull/939
- https://github.com/aureuserp/aureuserp/commit/2135ee7efff4090e70050b63015ab5e268760ec8
- https://github.com/aureuserp/aureuserp
- https://github.com/aureuserp/aureuserp/releases/tag/v1.3.0-BETA1
- https://vuldb.com/?ctiid.351083
- https://vuldb.com/?id.351083
- https://vuldb.com/?submit.769827
CVE-2026-4175 · published · modified · JSON