Composer tpwd/ke_search has 5 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2020-15517 | ke_search for Typo3 XSS Vulnerability | medium | 5.4 | >=3.0.0 and <3.1.4 or <2.8.3 | 3.1.4, 2.8.3 |
| CVE-2026-46724 | TYPO3 ke_search path traversal due to lack of normalization on config directory from file indexer | medium | 0.0 | >=7.0.0 and <7.0.1 or >=6.0.0 and <6.6.1 or >=5.0.0 and <5.6.2 or <4.6.7 | 7.0.1, 6.6.1, 5.6.2, 4.6.7 |
| CVE-2023-35783 | ke_search (aka Faceted Search) vulnerable to Cross-Site Scripting | medium | 6.3 | >=5.0.0 and <5.0.2 or >=4.1.0 and <4.6.6 or <4.0.3 or >=4.6.0 and <4.6.6 or >=4.5.0 and <4.6.0 or >=4.4.0 and <4.5.0 or >=4.3.0 and <4.4.0 or >=4.2.0 and <4.3.0 or >=4.1.0 and <4.2.0 | 5.0.2, 4.6.6, 4.0.3 |
| CVE-2026-46723 | TYPO3 ke_search path traversal from arbitrary table configuration input | medium | 0.0 | >=7.0.0 and <7.0.1 or >=6.0.0 and <6.6.1 or >=5.0.0 and <5.6.2 or <4.6.7 or <5.6.2 | 7.0.1, 6.6.1, 5.6.2 |
| CVE-2026-46722 | TYPO3 ke_search XML External Entity Injection | medium | 0.0 | >=7.0.0 and <7.0.1 or >=6.0.0 and <6.6.1 or >=5.0.0 and <5.6.2 or <4.6.7 | 7.0.1, 6.6.1, 5.6.2, 4.6.7 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked