GHSA-44m4-9cjp-j587
IBX-1392: Image filenames sanitization
ezsystems/ezpublish-kernel versions 7.5.* before 7.5.26 are vulnerable to certain injection attacks and unauthorized access to some image files.
What each source reports
GitHub AdvisoriesNo score
IBX-1392: Image filenames sanitization
ezsystems/ezpublish-kernel versions 7.5.* before 7.5.26 are vulnerable to certain injection attacks and unauthorized access to some image files.
- Record
GHSA-44m4-9cjp-j587- Updated
- 2026-11-02
OSVNo score
IBX-1392: Image filenames sanitization
ezsystems/ezpublish-kernel versions 7.5.* before 7.5.26 are vulnerable to certain injection attacks and unauthorized access to some image files.
- Record
GHSA-44m4-9cjp-j587- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ezsystems/ezpublish-kernelPackagist | 7.5.0 up to 7.5.26 | 7.5.26 |
ezsystems/ezpublish-kernelPackagist | 7.5.0 up to 7.5.26, plus listed versions v7.5.0v7.5.1v7.5.10v7.5.11v7.5.12 Show 28 moreShow lessv7.5.13v7.5.14v7.5.15v7.5.15.1v7.5.15.2v7.5.16v7.5.17v7.5.18v7.5.19v7.5.2v7.5.20v7.5.21v7.5.22v7.5.23v7.5.24v7.5.25v7.5.3v7.5.4v7.5.5v7.5.6v7.5.6-rc1v7.5.6.2v7.5.7v7.5.7-rc1v7.5.7.1v7.5.8v7.5.9v7.5.9.1 | 7.5.26 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-44m4-9cjp-j587 is a vulnerability with no CVSS score yet in ezsystems/ezpublish-kernel, published January 21, 2022. No source lists public exploit code. Fixed in ezsystems/ezpublish-kernel 7.5.26.