Skip to content
OpenAdvisories

Package · Packagist

islandora/crayfish

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2025-25286

    Crayfish allows Remote Code Execution via Homarus Authorization header

    Crayfish is a collection of Islandora 8 microservices, one of which, Homarus, provides FFmpeg as a microservice. Prior to Crayfish version 4.1.0, remote code execution may be possible in web-accessible installations of Homarus in certain configurations. The i…

    Islandora Crayfish islandora/crayfish Packagist
  • Critical —
    GHSA-c2p2-hgjg-9r3f

    Crayfish Allows Remote Code Execution via hypercube X-Islandora-Args Header

    ### Impact _What kind of vulnerability is it? Who is impacted?_ Remote code execution is possible in web-accessible installations of hypercube. ### Patches _Has the problem been patched? What versions should users upgrade to?_ Not yet, though no patch is necc…

    islandora/crayfish Packagist