pimcore/pimcore
2026.x@ 7d682f4Fixes47
CVEs0
Peak severityCritical
Commits28,949
Regression coverage48.6%
Highlights
Cross-Site Scripting: 14 prior fixes. Scrutinize any change in this area.
bundles/AdminBundle/Controller/Admin/Asset/AssetController.php: most-fixed (4 issues). Treat as high-risk during review.
35 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Authorization Bypass: 2 historical fix(es) link models/Asset/WebDAV/Tree.php to Authorization Bypass.
Path Traversal: 2 historical fix(es) link bundles/AdminBundle/Controller/Admin/Asset/AssetController.php to Path Traversal.
SQL Injection: 2 historical fix(es) link bundles/AdminBundle/Controller/Admin/TranslationController.php to SQL Injection.
Last analyzed 30 Sep 2026, 02:54 UTC