CMS

statamic/cms

The core Laravel CMS Composer package

#statamic#cms#laravel#laravel-package#composer-package#flat-file-cms#laravel-cms#php#vuejs#headless#api-rest#jamstack#ssg#graphql#flatfilecms#flatfile#content-management-system#php8

スコア

/ 100

Star

4,806

Fork

626

Open Issue

226

サイズ

74MB

言語

PHP ★

最終push

0 日前

Docker

—

採点内訳

過去CVE 20件 (やや多い)

✓

直近 push: 0 日前

✓

得意言語 (PHP)

✓

オープンissue 226件

✓

中規模 (74MB)

✓

Docker 未対応

—

1k–10k: 初心者ベスト (★4,806)

✓

※ 各項目の重みは「採点ルール」を参照。合計は 0 で底打ち。

過去の SecurityAdvisory (20 件)

MEDIUMGHSA-pf9c-ch8r-2958 CVE-2026-456602026/5/11
Server-Side Request Forgery via Glide
MEDIUMGHSA-m24v-f7g5-gq67 CVE-2026-443062026/4/28
Email enumeration via forgot password endpoint
HIGHGHSA-4jjr-vmv7-wh4w CVE-2026-411752026/4/15
Unsafe method invocation via query value resolution allows data destruction
MEDIUMGHSA-4hp7-3wxg-cv9q CVE-2026-338872026/3/24
Missing authorization in revision controllers allows unauthorized content access
MEDIUMGHSA-gcqf-5x9f-hq7f CVE-2026-338862026/3/24
Sensitive configuration values exposed to content editors via Antlers-enabled fields
MEDIUMGHSA-7f74-7q5w-hj4r CVE-2026-338852026/3/24
Open redirect on unauthenticated endpoints via URL parsing differential
MEDIUMGHSA-8vwx-ccf6-5wg2 CVE-2026-338842026/3/24
Live preview token bypasses content protection for unrelated entries
MEDIUMGHSA-3jg4-p23x-p4qx CVE-2026-338832026/3/24
Reflected XSS via unescaped redirect parameter in password reset form tag
MEDIUMGHSA-cvh3-23vq-w7h4 CVE-2026-338822026/3/24
Markdown preview endpoint exposes sensitive user data
MEDIUMGHSA-wh3h-gvc4-cc2g CVE-2026-331772026/3/17
Missing authorization check on taxonomy term creation via fieldtype
MEDIUMGHSA-qm7r-wwq7-6f85 CVE-2026-331712026/3/17
Path traversal in file dictionary fieldtype
HIGHGHSA-7rcv-55mj-chg7 CVE-2026-331722026/3/17
Stored XSS via SVG Sanitization Bypass
MEDIUMGHSA-hcch-w73c-jp4m CVE-2026-326122026/3/12
Privilege escalation via stored cross-site scripting
HIGHGHSA-5vrj-wf7v-5wr7 CVE-2026-284262026/2/27
Privilege escalation via stored cross-site scripting
HIGHGHSA-cpv7-q2wx-m8rw CVE-2026-284252026/2/27
Remote code execution via Antlers-enabled control panel inputs
MEDIUMGHSA-w878-f8c6-7r63 CVE-2026-284242026/2/27
Missing authorization allows access to email addresses
MEDIUMGHSA-cwpp-325q-2cvp CVE-2026-284232026/2/27
Server-Side Request Forgery via Glide
HIGHGHSA-rw9x-pxqx-q789 CVE-2026-279392026/2/27
Privilege escalation via elevated session bypass
CRITICALGHSA-jxq9-79vj-rgvw CVE-2026-275932026/2/23
Account takeover via password reset link injection
HIGHGHSA-8r7r-f4gm-wcpq CVE-2026-271962026/2/18
Privilege escalation via stored cross-site scripting