TI-2026-26067 CVE-2026-33687 · GHSA-fr76-5637-w3g9
Sharp has Unrestricted File Upload via Client-Controlled Validation Rules
Priority MEDIUM 41
Sharp is a content management framework built for Laravel as a package.
code16
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
code16 records in CISA KEVNo code16 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2026-26066 CVE-2026-33686 · GHSA-9ffq-6457-8958
Sharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtil
Priority MEDIUM 41
Sharp is a content management framework built for Laravel as a package.
TI-2026-44250 CVE-2026-61825 · GHSA-vj3q-vp3g-j9c8
code16/sharp has a stored XSS via data-html-content Sanitizer Bypass
Priority LOW 39
code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces.
TI-2026-44248 CVE-2026-61823 · GHSA-qxg3-46rw-79j8
code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute
Priority LOW 33
code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces.
TI-2026-32583 CVE-2026-44692 · GHSA-748w-hm6r-qc7v
Authenticated Sharp users can download unrelated Laravel Storage objects through the generic download endpoint
Priority LOW 33
Sharp is a content management framework built for Laravel as a package.
TI-2025-38981 CVE-2025-62798 · GHSA-9f58-4465-23c7
Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax
Priority LOW 24
Sharp is a content management framework built for Laravel as a package.
TI-2026-38678 CVE-2026-53634 · GHSA-vmwx-m75v-qvch
Sharp: Missing Authorization Check in Quick Creation Command Endpoints
Priority LOW 19
Sharp is a content management framework built for Laravel as a package.