Skip to content
OpenAdvisories

Package · Packagist

yourls/yourls

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.5
    CVE-2022-0088 Public exploit

    Cross-Site Request Forgery (CSRF) in yourls/yourls

    Cross-Site Request Forgery (CSRF) in GitHub repository yourls/yourls prior to 1.8.3.

    YOURLS yourls/yourls yourls/yourls Packagist
  • Critical 9.8
    CVE-2019-14537 Public exploit

    Access of Resource Using Incompatible Type ('Type Confusion') in yourls/yourls

    YOURLS through 1.7.3 is affected by a type juggling vulnerability in the api component that can result in login bypass.

    yourls/yourls Packagist