Skip to content
OpenAdvisories

Package · Packagist

code16/sharp

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-53634

    Sharp: Missing Authorization Check in Quick Creation Command Endpoints

    Sharp is a content management framework built for Laravel as a package. From version 9.0.0 to before version 9.22.3, the create and store endpoints of the Quick Creation Command feature did not enforce any authorization check. An authenticated Sharp user with…

    code16 sharp code16/sharp Packagist
  • Medium 5.4
    CVE-2025-62798

    Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax

    Sharp is a content management framework built for Laravel as a package. Prior to 9.11.1, a Cross-Site Scripting (XSS) vulnerability was discovered in code16/sharp when rendering content using the SharpShowTextField component. In affected versions, expressions…

    code16 sharp code16/sharp Packagist
  • Medium 6.1
    CVE-2025-61457

    code16 Sharp vulnerable to Cross Site Scripting (XSS)

    code16 Sharp v9.6.6 is vulnerable to Cross Site Scripting (XSS) src/Form/Fields/SharpFormUploadField.php.

    code16/sharp Packagist