Search by 
neos/flow Security Advisories for 2.3.5 (2)
-
Time-Based Information Disclosure Vulnerability in Flow
Affected version: >=2.3.0,<2.3.16|>=3.0.0,<3.0.10|>=3.1.0,<3.1.7|>=3.2.0,<3.2.7|>=3.3.0,<3.3.5
Reported by:
FriendsOfPHP/security-advisories -
Arbitrary file upload and XML External Entity processing
Affected version: >=2.3.0,<2.3.7|>=3.0.0,<3.0.1
Reported by:
FriendsOfPHP/security-advisories