winter/wn-system-module vulnerabilities
CVEs whose affected-version data names the winter/wn-system-module package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
GHSA-2223-f22x-24cqMedium· 4.9Winter: Local File Inclusion through =include directives in JavaScript asset compilation
Winter: Local File Inclusion through =include directives in JavaScript asset compilation
▾ Sunlitwinter · winter/wn-system-modulevia GHSA
GHSA-8cfw-pcwh-v63wHigh· 8.4Winter: Authenticated Twig sandbox escape in CMS SecurityPolicy (bypass of CVE-2024-54149)
Winter: Authenticated Twig sandbox escape in CMS SecurityPolicy (bypass of CVE-2024-54149)
▾ Twilightwinter · winter/wn-system-modulevia GHSA