CVE-2026-63179
1 advisory.
Packagist/winter/wn-backend-module CVE-2026-63179: medium 4.9, EPSS 0.52%
Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets
Action: Upgrade winter/wn-backend-module to 1.2.13 or later.
composer require winter/wn-backend-module:1.2.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.13 | - |
Fixed versions
| 1.2.13 |
Sources
- osv: GHSA-58fp-mcx6-7qf9
- https://github.com/wintercms/winter/security/advisories/GHSA-58fp-mcx6-7qf9
- https://github.com/wintercms/storm/commit/af770331c683e628533a6ec2991285d6e10a4d6c
- https://github.com/wintercms/winter/commit/130f0ea43e9228bf0d129b481da1cdfbcc4b4456
- https://github.com/wintercms/winter
- https://github.com/wintercms/winter/releases/tag/v1.2.13
CVE-2026-63179 · published · modified · JSON