composer

spatie/schema-org

Security advisories for spatie/schema-org, newest first. 1 known, all fixed. If you’re on 4.0.2 or later, none of them affect you.

RSS feed Check your lock file →

Latest version

5.0.2

Advisories

1 · 0 unfixed

Last advisory

20 Apr 2026

Safe from

4.0.2

1 advisory · newest first

LOW 20 Apr 2026

Cross-site scripting (XSS) via script break-out in toScript() output

PKSA-6mmh-w4kg-c2xp

Affected

≥ 3.23.1, < 3.23.2 ≥ 4.0.0, < 4.0.2

Fixed in

3.23.2 4.0.2

Published

20 Apr 2026

/advisories/composer/spatie/schema-org/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Same vendor

spatie/browsershot10 advisories

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →