october_cms vulnerabilities

CVEs whose affected-version data names the october_cms package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-101005High· 7.3

today

A vulnerability was detected in October CMS up to 4.3.4

A vulnerability was detected in October CMS up to 4.3.4. This affects the function validateExternalImageHost of the file System/Classes/ResizeImages.php of the component SSRF Protection. The manipulation results in server-side request fo…

▾ Twilightvia NVD