winter/wn-system-module Security Advisories for v1.2.9 (2)
-
[HIGH] Winter: Authenticated Twig sandbox escape in CMS SecurityPolicy (bypass of CVE-2024-54149)
PKSA-wtw3-z7vh-tcrk GHSA-8cfw-pcwh-v63w
Affected version: >=1.2.7,<1.2.13
Reported by:
GitHub -
[MEDIUM] Winter: Local File Inclusion through =include directives in JavaScript asset compilation
PKSA-xv7p-39zk-tqqd GHSA-2223-f22x-24cq
Affected version: <1.2.13
Reported by:
GitHub