漏洞公告

Concrete does not validate a CSRF token before processing requests to `/dashboard/extend/update/do_update/<pkgHandle>`

Concrete CMS is vulnerable to missing authorization in the bulk_user_assignment.php

Concrete CMS has Stored XSS through its height parameter

Concrete CMS does not validate a CSRF token before processing requests to `/dashboard/extend/update/prepare_remote_upgrade/<remoteMPID>`

Concrete CMS contains a CSRF vulnerability

Concrete CMS is vulnerable to authorization bypass in the Calendar Block

LiteLLM allows a user to modify their own user_role via the /user/update endpoint

Concrete CMS is Vulnerable to Cross-Site Request Forgery

Concrete CMS Vulnerable to Deserialization of Untrusted Data

Concrete CMS is vulnerable to Stored XSS via OAuth integration name

Concrete CMS Vulnerable to Relative Path Traversal

Concrete CMS is vulnerable to unauthenticated file usage disclosure

LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit

Twig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)

Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`

Twig: Sandbox property allowlist bypass via the `column` filter (array_column on objects)

Twig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template name

Twig: PHP code injection via `{% use %}` template name

twig/intl-extra: Unbounded formatter memoisation in keyed on template-controlled arguments

Twig: The `spaceless` filter implicitly marks its output as safe

JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection

Russh: Unchecked CryptoVec allocation and growth handling is reachable

@hulumi/policies: Stack-wide evidence bypassed Cloudflare and deployment-governance guardrails