ibexa/user vulnerabilities (Packagist)

3 vulnerabilities.

• ibexa/user Packagist Ibexa User Bundle is missing password change validation CVE-2025-67719 Fix available 8.5 HighDecember 10, 2025
• ibexa/user Packagist ibexa/user login enumerates user accounts GHSA-q3x8-6898-23g3 Fix available 6.9 MediumOctober 17, 2025
• ibexa/user Packagist Ibexa User Settings are accessible on the front-end for anonymous user GHSA-r3fg-3r88-6x3f Fix available 5.4 MediumMay 10, 2023