Silverstripe Assets vulnerabilities

• silverstripe silverstripe-assets Silverstripe Assets Module has a DBFile::getURL() permission bypass CVE-2026-24749 Fix available 5.3 MediumApril 16, 2026
• silverstripe assets, framework, asset admin +2 more Silverstripe XSS in shortcodes CVE-2022-38724 Fix available 5.4 MediumNovember 21, 2022
• silverstripe assets Unpublished, protected files can be published via shortcode CVE-2022-29858 Fix available 4.3 MediumJune 28, 2022