TI-2026-44248 CVE-2026-61823 · GHSA-qxg3-46rw-79j8
code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute
Priority LOW 33
code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces.
Vulnerabilities
7 records
TI-2026-44250 CVE-2026-61825 · GHSA-vj3q-vp3g-j9c8
code16/sharp has a stored XSS via data-html-content Sanitizer Bypass
Priority LOW 39
code16 Sharp is a Laravel-based framework for building content-management and administrative interfaces.
TI-2026-32583 CVE-2026-44692 · GHSA-748w-hm6r-qc7v
Authenticated Sharp users can download unrelated Laravel Storage objects through the generic download endpoint
Priority LOW 33
Sharp is a content management framework built for Laravel as a package.
TI-2026-38678 CVE-2026-53634 · GHSA-vmwx-m75v-qvch
Sharp: Missing Authorization Check in Quick Creation Command Endpoints
Priority LOW 19
Sharp is a content management framework built for Laravel as a package.
TI-2026-26066 CVE-2026-33686 · GHSA-9ffq-6457-8958
Sharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtil
Priority MEDIUM 41
Sharp is a content management framework built for Laravel as a package.
TI-2026-26067 CVE-2026-33687 · GHSA-fr76-5637-w3g9
Sharp has Unrestricted File Upload via Client-Controlled Validation Rules
Priority MEDIUM 41
Sharp is a content management framework built for Laravel as a package.
TI-2025-38981 CVE-2025-62798 · GHSA-9f58-4465-23c7
Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax
Priority LOW 24
Sharp is a content management framework built for Laravel as a package.