CVE-2026-44521
1 advisory.
Packagist/studio-42/elfinder CVE-2026-44521: high 8.8
elFinder MySQL has a SQL Injection in its Volume Driver (elFinderVolumeMySQL)
Action: Upgrade studio-42/elfinder to 2.1.68 or later.
composer require studio-42/elfinder:2.1.68Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.68 | - |
Fixed versions
| 2.1.68 |
Sources
- osv: GHSA-c3gj-q88f-7hqj
- https://github.com/Studio-42/elFinder/security/advisories/GHSA-c3gj-q88f-7hqj
- https://nvd.nist.gov/vuln/detail/CVE-2026-44521
- https://github.com/Studio-42/elFinder
CVE-2026-44521 · published · modified · JSON