packagist package report

Is silverstripe/admin safe?

7 known vulnerabilities, worst severity MODERATE.

cvss

4.3

how bad it is if exploited, out of 10

epss

0.30%

chance of exploitation in the next 30 days

xyz score

not scored

CyberXYZ composite, out of 10

fig. 01 — GHSA-j3m6-gvm8-mhvw, the advisory selected below

// advisories

GHSA-j3m6-gvm8-mhvw

MODERATECVE-2023-49783

Users who don't have edit or delete permissions for records exposed in a ModelAdmin can still edit or delete records using the CSV import form, provided they have create permissions.

Affected: >= 2.0.0, < 2.1.8, >= 1.0.0, < 1.13.19
Fixed in: 2.1.8
Weakness: CWE-863
Published: 2024-01-23
Source: github

GHSA NVD MITRE reference reference reference reference reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so packagist packages are not covered.

Checked 2026-09-22 at 00:44 UTC. The most recent advisory here was published 2024-05-22. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is silverstripe/admin safe? packagist package security report | CyberXYZ