Skip to content

Craft CMS' anonymous "assets/image-editor" calls return private asset editor metadata to unauthorized users

Low severity GitHub Reviewed Published Mar 24, 2026 in craftcms/cms • Updated Mar 25, 2026
0 Open 0 Closed
Type
Filter by repository type
All
Public
Private
Internal
Sort
Sort by
Newest
Oldest

No open alerts for this advisory

Give feedback on Dependabot alerts