Vulnerabilities

TI-2026-27345 CVE-2026-35192 · GHSA-7h2m-m8vj-598h

Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST

LOW 13

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00544 Published 2026-05-05 Partial fix · 6.0.5, 5.2.14 CWE-539

TI-2026-06053 CVE-2026-6907 · GHSA-5hrc-gvxj-w55p

LOW 12

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00358 Published 2026-05-05 Partial fix · 6.0.5, 5.2.14 CWE-524

TI-2026-05052 CVE-2026-5766 · GHSA-w26r-rmm8-9c29

LOW 28

An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00423 Published 2026-05-05 Partial fix · 6.0.5, 5.2.14 CWE-130