craftcms/craft vulnerabilities (Packagist)

1 vulnerability.

• craftcms/craft Packagist Craft has a save_images_Asset graphql mutation can be abused to exfiltrate AWS credentials of underlying host CVE-2026-25492 Fix available 5.3 MediumFebruary 9, 2026