tocsin

CVE-2026-45660

1 advisory.

Packagist/statamic/cms CVE-2026-45660: medium 5.4, EPSS 0.24%

Statamic CMS: Server-Side Request Forgery via Glide

Action: Upgrade statamic/cms to 5.73.22 or later.

composer require statamic/cms:5.73.22
composer require statamic/cms:6.18.1

Affected

introducedfixedlast affected
05.73.22-
6.0.0-alpha.16.18.1-

Fixed versions

5.73.226.18.1

Sources

CVE-2026-45660 · published · modified · JSON