flarum/framework
2.x@ f49072aFixes12
CVEs0
Peak severityCritical
Commits9,352
Regression coverage36.4%
Highlights
Authentication Bypass: 3 prior fixes. Scrutinize any change in this area.
framework/core/src/User/PasswordToken.php: most-fixed (2 issues). Treat as high-risk during review.
11 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Authentication Bypass: 2 historical fix(es) link framework/core/src/User/PasswordToken.php to Authentication Bypass.
Authentication Bypass: 1 historical fix(es) link framework/core/src/Update/Controller/UpdateController.php to Authentication Bypass.
Authorization Bypass: 1 historical fix(es) link extensions/realtime/src/Websocket/Message/Message.php to Authorization Bypass.
Last analyzed 30 Sep 2026, 02:51 UTC