Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
s9y/serendipity
s9y/serendipity vulnerabilities (Packagist)
2 vulnerabilities.
s9y/serendipity
Packagist
Serendipity: Host Header Injection leads to SMTP header injection via unvalidated HTTP_HOST
CVE-2026-39971
Fix available
7.2
High
April 14, 2026
s9y/serendipity
Packagist
Serendipity: Host Header Injection enables authentication cookie scoping to an attacker-controlled domain
CVE-2026-39963
Fix available
6.9
Medium
April 14, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open