WI
Product
winter
by wintercms · last CVE Aug 26, 2026
18
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 9Low 1
Watch

Add winter to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-27591
9.9
1%
Mar 11
Winter: Privilege escalation by authenticated backend users
Affected: >= 1.2.0, < 1.2.12; >= 1.1.0, < 1.1.12; < 1.0.477
CVE-2022-39357
9.8
1%
Oct 26
Winter vulnerable to Prototype Pollution in Snowboard framework
Affected: >= 1.1.8, < 1.1.10; = 1.2.0
Showing 2