contao/comments-bundle

Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.

At a glance

Ecosystem
Packagist
Vulnerability status
2 advisory(ies) without a verdict

Advisories (2)

AdvisoryAffected versionsLatest version
GHSA-628f-v4f6-p37r
Contao: Cross-site scripting in the comments bundle
4.0.0 – < 5.3.50 ; 5.4.0-RC1 – < 5.7.12Undetermined
GHSA-j55w-hjpj-825g
Contao: Insufficient BBCode sanitizer
2.0.0 – < 4.13.40 ; 5.0.0-RC1 – < 5.3.4Undetermined

Sources

SourceLicence