CVE-2026-42224
1 advisory.
Packagist/ipl/web CVE-2026-42224: high 7.6, EPSS 0.45%
ipl/web is vulnerable to reflected XSS by malformed search requests
Action: Upgrade ipl/web to 0.10.3 or later.
composer require ipl/web:0.13.1composer require ipl/web:0.10.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.11.0 | 0.13.1 | - |
| 0 | 0.10.3 | - |
Fixed versions
| 0.13.1 | 0.10.3 |
Sources
- osv: GHSA-55wf-5m3q-6jjf
- https://github.com/Icinga/ipl-web/security/advisories/GHSA-55wf-5m3q-6jjf
- https://nvd.nist.gov/vuln/detail/CVE-2026-42224
- https://github.com/Icinga/ipl-web/commit/f387e92504d7a03bb857d1aee9b7410e06dd065d
- https://github.com/Icinga/ipl-web
- https://github.com/Icinga/ipl-web/releases/tag/v0.10.3
- https://github.com/Icinga/ipl-web/releases/tag/v0.13.1
CVE-2026-42224 · published · modified · JSON