Skip to content
OpenAdvisories

Vendor

Islandora

1 known vulnerabilities.

Products

Crayfish 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-25286

    Crayfish allows Remote Code Execution via Homarus Authorization header

    Crayfish is a collection of Islandora 8 microservices, one of which, Homarus, provides FFmpeg as a microservice. Prior to Crayfish version 4.1.0, remote code execution may be possible in web-accessible installations of Homarus in certain configurations. The i…

    Islandora Crayfish islandora/crayfish Packagist