Composer ezsystems/ezplatform-kernel has 11 known advisories in the phpwarden feed. Feed 2026.10.29.2, updated 2026-10-29.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2022-48365 | Company admin role gives excessive privileges in eZ Platform Ibexa | high | 7.2 | >=1.3.0 and <1.3.26 | 1.3.26 |
| CVE-2022-25336 | Exposure of Resource to Wrong Sphere in ezsystems/ezplatform-kernel | medium | 5.3 | >=1.3.0 and <1.3.12 | 1.3.12 |
| CVE-2022-48366 | Timing attack in eZ Platform Ibexa | low | 3.7 | >=1.3.0 and <1.3.19 | 1.3.19 |
| CVE-2021-46875 | Cross-site scripting in eZ Platform Kernel | high | 0.0 | <1.2.5.1 or >=1.3.0 and <1.3.1.1 | 1.2.5.1, 1.3.1.1 |
| 2020-05-20-1 | EZSA-2020-004 Object Injection in SiteAccessMatchListener | unknown | 0.0 | >=1.0.0 and <1.0.2.1 | 1.0.2.1 |
| GHSA-2w9p-xxqr-h253 | eZ Platform Object Injection in SiteAccessMatchListener | high | 0.0 | >=1.0.0 and <1.0.3 | 1.0.3 |
| GHSA-342c-vcff-2ff2 | Login timing attack in ezsystems/ezplatform-kernel | critical | 0.0 | >=1.3.0 and <1.3.19 | 1.3.19 |
| GHSA-8h83-chh2-fchp | eZ Platform users with the Company admin role can assign any role to any user | critical | 0.0 | >=1.3.0 and <1.3.26 | 1.3.26 |
| GHSA-gv2c-5g79-h73c | Ibexa ezplatform-kernel download route allows filename change | low | 0.0 | >=1.3.0 and <1.3.34 | 1.3.34 |
| GHSA-mwvh-p3hx-x4gg | Ibexa Kernel's files with blacklisted extensions can be still saved to drafts | medium | 0.0 | >=1.3.0 and <1.3.35 | 1.3.35 |
| GHSA-w8qp-hmh5-4v9v | Object state limitation has no effect | critical | 0.0 | >=1.3.0 and <1.3.17 | 1.3.17 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# PHP projects (recommended) composer require --dev phpwarden/phpwarden # then vendor/bin/phpwarden deps composer.lock # or, without Composer pipx install phpwarden && phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked