composer

nystudio107/craft-seomatic

Security advisories for nystudio107/craft-seomatic, newest first. 7 known, all fixed. If you’re on 3.4.12 or later, none of them affect you.

RSS feed Check your lock file →

Latest version

5.1.22

Advisories

7 · 0 unfixed

Last advisory

13 Jun 2022

Safe from

3.4.12

7 advisories · newest first

MODERATE6.1 13 Jun 2022

Cross-site Scripting in SEOmatic plugin

GHSA-6hjc-m38h-7jhh · CVE-2021-41750

Affected

< 3.4.11

Fixed in

3.4.11

Published

13 Jun 2022

CRITICAL9.8 13 Jun 2022

Code Injection in SEOmatic

GHSA-g7xr-v82w-qggq · CVE-2021-41749

Affected

< 3.4.11

Fixed in

3.4.11

Published

13 Jun 2022

HIGH7.5 24 May 2022

SEOmatic for CraftCMS allows Server-Side Template Injection

GHSA-23q7-59jj-2pj4 · CVE-2020-12790

Affected

< 3.2.49

Fixed in

3.2.49

Published

24 May 2022

CRITICAL9.8 24 May 2022

SEOmatic for CraftCMS allows Server-Side Template Injection

GHSA-6q4j-8pjm-5mgc · CVE-2020-9757

Affected

< 3.3.0

Fixed in

3.3.0

Published

24 May 2022

HIGH7.5 13 May 2022

SEOmatic plugin for Craft CMS SSTI Vulnerability

GHSA-6j9m-rp7m-3gfg · CVE-2018-14716

Affected

< 3.1.4

Fixed in

3.1.4

Published

13 May 2022

HIGH9.8 12 Mar 2022

Server-side Template Injection in nystudio107/craft-seomatic

GHSA-m3xv-x3ph-mq22 · CVE-2021-44618

Affected

< 3.4.12

Fixed in

3.4.12

Published

12 Mar 2022

UNRATED 28 Apr 2020

SSTI Vulnerability

PKSA-ngnx-y48m-n4vc

Affected

< 3.3.0

Fixed in

3.3.0

Published

28 Apr 2020

/advisories/composer/nystudio107/craft-seomatic/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →