CVE-2026-79773
1 advisory.
Packagist/winter/wn-system-module CVE-2026-79773: medium 4.9, EPSS 0.49%
Winter: Local File Inclusion through =include directives in JavaScript asset compilation
Action: Upgrade winter/wn-system-module to 1.2.13 or later.
composer require winter/wn-system-module:1.2.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.13 | - |
Fixed versions
| 1.2.13 |
Sources
- osv: GHSA-2223-f22x-24cq
- https://github.com/wintercms/winter/security/advisories/GHSA-2223-f22x-24cq
- https://github.com/wintercms/storm/commit/fd673f4f32140c97c68b1ed705764b819747fbdf
- https://github.com/wintercms/winter/commit/e09c8d3526f3583cb6c3476a021b885088ecd4bd
- https://github.com/wintercms/winter
- https://github.com/wintercms/winter/releases/tag/v1.2.13
CVE-2026-79773 · published · modified · JSON