flarum/framework vulnerabilities (Packagist)

4 vulnerabilities.

• flarum/framework Packagist Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite CVE-2025-27794 Fix available 6.8 MediumMarch 12, 2025
• flarum/framework Packagist Flarum's Logout Route allows open redirects CVE-2024-21641 Fix available 6.5 MediumJanuary 5, 2024
• flarum/framework Packagist Server-Side Request Forgery via Avatar upload in flarum CVE-2023-40033 Fix available 7.1 HighAugust 16, 2023
• flarum/framework Packagist Flarum Core Leaks PII CVE-2018-19133 5.3 MediumNovember 9, 2018