Skip to content
OpenAdvisories

Product · roadiz

core-bundle-dev-app

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.7
    CVE-2026-42206

    Roadiz OpenID Connect nonce generated but never validated — ID token replay attack

    Roadiz is a polymorphic content management system based on a node system. Prior to versions 2.3.43, 2.5.45, 2.6.31, and 2.7.18, the roadiz/openid package generates an OIDC nonce in OAuth2LinkGenerator::generate() and includes it in the authorization request s…

    roadiz core-bundle-dev-app roadiz/openid Packagist
  • Medium 6.8
    CVE-2026-33486

    Roadiz has Server-Side Request Forgery (SSRF) in roadiz/documents

    Roadiz is a polymorphic content management system based on a node system that can handle many types of services. A vulnerability in roadiz/documents prior to versions 2.7.9, 2.6.28, 2.5.44, and 2.3.42 allows an authenticated attacker to read any file on the s…

    roadiz core-bundle-dev-app roadiz/documents Packagist