EA
Product
EasyAdminBundle
by EasyCorp · last CVE Sep 14, 2026
2
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch

Add EasyAdminBundle to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-81892
8.1
0%
Aug 31
EasyAdmin custom-action dispatcher bypasses access_control on other routes
Affected: >= 4.0.0, < 4.29.16; >= 5.0.0, < 5.5.1
CVE-2026-54087
7.6
0%
Sep 14
EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField
Affected: >= 5.0.0, < 5.0.13
Showing 2