High DSA-5190-1 1 CVE

spip - security update

Published Jul 26, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 10	spip	3.2.4-1+deb10u9
Debian · 11	spip	3.2.11-3+deb11u5

Vulnerabilities 1

High 8.8

CVE-2022-37155 EPSS 40%

RCE in SPIP 3.1.13 through 4.1.2 allows remote authenticated users to execute arbitrary code via the _oups parameter.

spip spip Debian Ubuntu

Dec 13, 2022