sulu/sulu vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-9M6V-8FXC-4R44Lowsulu/sulu: Sulu: Used API Keys may be available via Admin API CVE-2026-45701Mediumsulu/sulu: Sulu: Weak Cryptographical usage for API Key generation and Reset Tokens CVE-2026-34372Mediumsulu/sulu: Sulu checks fix permissions for subentities endpoints CVE-2025-47778Mediumsulu/sulu: Sulu vulnerable to XXE in SVG File upload Inspector CVE-2024-47617Mediumsulu/sulu: Injection of arbitrary HTML/JavaScript code through the media download URL CVE-2024-47618Mediumsulu/sulu: Cross-site Scripting via uploaded SVG CVE-2024-27915Mediumsulu/sulu: Sulu grants access to pages regardless of role permissions CVE-2024-24807Lowsulu/sulu: Sulu HTML Injection via Autocomplete Suggestion CVE-2023-39343Mediumsulu/sulu: Sulu Observable Response Discrepancy on Admin Login CVE-2021-43835Highsulu/sulu: Privilege escalation in the Sulu Admin panel CVE-2021-43836Highsulu/sulu: PHP file inclusion in the Sulu admin panel CVE-2021-41169Mediumsulu/sulu: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in sulu/sulu CVE-2021-32737Mediumsulu/sulu: XSS Injection in Media Collection Title was possible CVE-2020-15132Mediumsulu/sulu: Reset Password / Login vulnerability in Sulu

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo