Composer ssddanbrown/bookstack has 10 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2021-4119 | BookStack is vulnerable to Improper Access Control. | medium | 5.3 | <21.11.3 | 21.11.3 |
| CVE-2020-5256 | Remote Code Execution Through Image Uploads in BookStack | high | 7.9 | <0.25.5 | 0.25.5 |
| CVE-2020-26211 | Bookstack Cross-site Scripting vulnerability | high | 8.7 | <0.30.4 | 0.30.4 |
| CVE-2021-3915 | bookstack is vulnerable to Unrestricted Upload of File with Dangerous Type | high | 7.6 | <21.0.3 | 21.0.3 |
| CVE-2021-4026 | bookstack is vulnerable to Improper Access Control | medium | 4.3 | <21.11.2 | 21.11.2 |
| CVE-2020-11055 | Cross-Site Scripting in BookStack | medium | 6.3 | >=0.18.0 and <0.29.2 | 0.29.2 |
| CVE-2022-0877 | Cross-site Scripting in BookStack | medium | 5.4 | <22.02.3 | 22.02.3 |
| CVE-2021-4194 | bookstack is vulnerable to Improper Access Control | medium | 4.3 | <21.12.1 | 21.12.1 |
| CVE-2024-36676 | BookStack Incorrect Access Control vulnerability | high | 8.2 | <24.05.1 | 24.05.1 |
| CVE-2021-3944 | bookstack is vulnerable to Cross-Site Request Forgery (CSRF) | low | 3.1 | <21.11 | 21.11 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked