craftcms/cms
5.x@ 5584aef
Fixes54
CVEs0
Peak severityCritical
Commits50,000
Regression coverage25.8%
Highlights
Authorization Bypass: 18 prior fixes. Scrutinize any change in this area.
src/controllers/AssetsController.php: most-fixed (5 issues). Treat as high-risk during review.
42 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Authorization Bypass: 5 historical fix(es) link src/controllers/AssetsController.php to Authorization Bypass.
SSRF: 3 historical fix(es) link src/gql/resolvers/mutations/Asset.php to SSRF.
Cross-Site Scripting: 3 historical fix(es) link src/base/Element.php to Cross-Site Scripting.
Last analyzed 30 Sep 2026, 02:52 UTC