CVE-2026-54087
1 advisory.
Packagist/easycorp/easyadmin-bundle CVE-2026-54087: high 7.6, EPSS 0.40%
EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField
Action: Upgrade easycorp/easyadmin-bundle to 5.0.13 or later.
composer require easycorp/easyadmin-bundle:5.0.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.13 | - |
Fixed versions
| 5.0.13 |
Sources
- osv: GHSA-8559-gwj3-q37r
- https://github.com/EasyCorp/EasyAdminBundle/security/advisories/GHSA-8559-gwj3-q37r
- https://github.com/EasyCorp/EasyAdminBundle/commit/8132b2b0ca3876c9261264fa267106a1b2c10a68
- https://github.com/EasyCorp/EasyAdminBundle
- https://github.com/EasyCorp/EasyAdminBundle/releases/tag/v5.0.13
CVE-2026-54087 · published · modified · JSON