v5.0.9
patch
Jul 01, 2026
Released
Jul 01, 2026
License
GPL-2.0-only OR custom
Runtime
>=8.3
Checksum
Funding
[]
Dependencies
(41)
composer/package-versions-deprecated
^1.11
doctrine/annotations
^2.0
doctrine/dbal
^3.7.0
doctrine/doctrine-bundle
^2.11.0
doctrine/orm
^2.7
doctrine/persistence
^3.0
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^3.0
+ 33 more
v4.6.31
patch
Jul 01, 2026
Released
Jul 01, 2026
Runtime
^7.4 || ^8.0
Checksum
Dependencies
(42)
composer/package-versions-deprecated
^1.11
doctrine/dbal
^2.13.0
doctrine/doctrine-bundle
^2.0
doctrine/orm
^2.7
doctrine/persistence
^2.0 || ^3.0
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^2.8
friendsofsymfony/jsrouting-bundle
^2.5
+ 34 more
v5.0.8
patch
May 21, 2026
Released
May 21, 2026
Checksum
v4.6.30
patch
May 21, 2026
Released
May 21, 2026
Checksum
v5.0.7
patch
Apr 20, 2026
Released
Apr 20, 2026
Runtime
>=8.3
Checksum
Dependencies
(42)
composer/package-versions-deprecated
^1.11
doctrine/annotations
^2.0
doctrine/dbal
^3.7.0
doctrine/doctrine-bundle
^2.11.0
doctrine/orm
^2.7
doctrine/persistence
^3.0
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^3.0
+ 34 more
v4.6.29
patch
Apr 14, 2026
Released
Apr 14, 2026
Checksum
v5.0.6
patch
Mar 05, 2026
Released
Mar 05, 2026
Runtime
>=8.3
Checksum
Dependencies
(42)
composer/package-versions-deprecated
^1.11
doctrine/annotations
^2.0
doctrine/dbal
^3.7.0
doctrine/doctrine-bundle
^2.11.0
doctrine/orm
^2.7
doctrine/persistence
^3.0
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^3.0
+ 34 more
v4.6.28
patch
Mar 05, 2026
Released
Mar 05, 2026
Checksum
v4.6.27
patch
Feb 03, 2026
Released
Feb 03, 2026
Runtime
^7.4 || ^8.0
Checksum
Dependencies
(41)
composer/package-versions-deprecated
^1.11
doctrine/dbal
^2.13.0
doctrine/doctrine-bundle
^2.0
doctrine/orm
^2.7
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^2.8
friendsofsymfony/jsrouting-bundle
^2.5
ibexa/doctrine-schema
~4.6.0
+ 33 more
v5.0.5
patch
Jan 15, 2026
Released
Jan 15, 2026
Runtime
>=8.3
Checksum
Dependencies
(41)
composer/package-versions-deprecated
^1.11
doctrine/annotations
^2.0
doctrine/dbal
^3.7.0
doctrine/doctrine-bundle
^2.11.0
doctrine/orm
^2.7
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^3.0
friendsofsymfony/jsrouting-bundle
^3.5
+ 33 more
v5.0.4
patch
Dec 10, 2025
Released
Dec 10, 2025
Checksum
v4.6.26
patch
Dec 10, 2025
Released
Dec 10, 2025
Runtime
^7.4 || ^8.0
Checksum
Dependencies
(43)
composer/package-versions-deprecated
^1.11
doctrine/dbal
^2.13.0
doctrine/doctrine-bundle
^2.0
doctrine/orm
^2.7
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^2.8
friendsofsymfony/jsrouting-bundle
^2.5
guzzlehttp/guzzle
^6.5
+ 35 more
v5.0.3
patch
Oct 17, 2025
Released
Oct 17, 2025
Checksum
v4.6.25
patch
Oct 16, 2025
Released
Oct 16, 2025
Checksum
v5.0.2
patch
Sep 09, 2025
Released
Sep 09, 2025
Checksum
v4.6.24
patch
Sep 09, 2025
Released
Sep 09, 2025
Checksum
v5.0.1
patch
Aug 19, 2025
Released
Aug 19, 2025
Checksum
v4.6.23
patch
Aug 19, 2025
Released
Aug 19, 2025
Checksum
v4.6.22
patch
Aug 05, 2025
Released
Aug 05, 2025
Checksum
v5.0.0
major
Jul 22, 2025
Released
Jul 22, 2025
Checksum
v5.0.0-rc1
pre
Jul 11, 2025
Released
Jul 11, 2025
Runtime
>=8.3
Checksum
Dependencies
(41)
composer/package-versions-deprecated
^1.11
doctrine/annotations
^2.0
doctrine/dbal
^3.7.0
doctrine/doctrine-bundle
^2.11.0
doctrine/orm
^2.7
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^3.0
friendsofsymfony/jsrouting-bundle
^3.5
+ 33 more
v5.0.0-beta1
pre
Jun 12, 2025
Released
Jun 12, 2025
Runtime
>=8.3
Checksum
Dependencies
(40)
composer/package-versions-deprecated
^1.11
doctrine/annotations
^2.0
doctrine/dbal
^3.7.0
doctrine/doctrine-bundle
^2.11.0
doctrine/orm
^2.7
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^3.0
friendsofsymfony/jsrouting-bundle
^3.5
+ 32 more
v4.6.21
patch
Jun 11, 2025
Released
Jun 11, 2025
Runtime
^7.4 || ^8.0
Checksum
Dependencies
(42)
composer/package-versions-deprecated
^1.11
doctrine/dbal
^2.13.0
doctrine/doctrine-bundle
^2.0
doctrine/orm
^2.7
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^2.8
friendsofsymfony/jsrouting-bundle
^2.5
guzzlehttp/guzzle
^6.5
+ 34 more
v4.6.20
patch
May 27, 2025
Released
May 27, 2025
Checksum
v4.6.19
patch
Apr 08, 2025
Released
Apr 08, 2025
Checksum
v4.6.18
patch
Mar 06, 2025
Released
Mar 06, 2025
Checksum
v4.6.17
patch
Mar 04, 2025
Released
Mar 04, 2025
Checksum
v4.6.16
patch
Jan 16, 2025
Released
Jan 16, 2025
Runtime
^7.4 || ^8.0
Checksum
Dependencies
(42)
composer/package-versions-deprecated
^1.11
doctrine/dbal
^2.13.0
doctrine/doctrine-bundle
^2.0
doctrine/orm
^2.7
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^2.8
friendsofsymfony/jsrouting-bundle
^2.5
guzzlehttp/guzzle
^6.5
+ 34 more
v4.6.15
patch
Dec 13, 2024
Released
Dec 13, 2024
Checksum
v4.6.14
patch
Nov 28, 2024
Released
Nov 28, 2024
Checksum
v4.6.13
patch
Oct 22, 2024
Released
Oct 22, 2024
Checksum
v4.6.12
patch
Oct 04, 2024
Released
Oct 04, 2024
Checksum
v4.6.11
patch
Sep 16, 2024
Released
Sep 16, 2024
Checksum
v4.6.10
patch
Aug 14, 2024
Released
Aug 14, 2024
Checksum
v4.6.9
patch
Jul 31, 2024
Released
Jul 31, 2024
Checksum
v4.6.8
patch
Jul 11, 2024
Released
Jul 11, 2024
Checksum
v4.6.7
patch
Jun 10, 2024
Released
Jun 10, 2024
Checksum
v4.6.6
patch
May 17, 2024
Released
May 17, 2024
Checksum
v4.6.5
patch
May 14, 2024
Released
May 14, 2024
Checksum
v4.6.4
patch
May 13, 2024
Released
May 13, 2024
Checksum
v4.6.3
patch
Apr 11, 2024
Released
Apr 11, 2024
Checksum
v4.5.7
patch
Apr 10, 2024
Released
Apr 10, 2024
Runtime
^7.4 || ^8.0
Checksum
Dependencies
(42)
composer/package-versions-deprecated
^1.11
doctrine/dbal
^2.13.0
doctrine/doctrine-bundle
^2.0
doctrine/orm
^2.7
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^2.8
friendsofsymfony/jsrouting-bundle
^2.5
guzzlehttp/guzzle
^6.5
+ 34 more
v4.6.2
patch
Mar 20, 2024
Released
Mar 20, 2024
Runtime
^7.4 || ^8.0
Checksum
Dependencies
(42)
composer/package-versions-deprecated
^1.11
doctrine/dbal
^2.13.0
doctrine/doctrine-bundle
^2.0
doctrine/orm
^2.7
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^2.8
friendsofsymfony/jsrouting-bundle
^2.5
guzzlehttp/guzzle
^6.5
+ 34 more
v4.5.6
patch
Mar 20, 2024
Released
Mar 20, 2024
Checksum
v4.6.1
patch
1 CVE
GHSA-9j39-4686-m3c4
Mar 20, 2024
Ibexa Kernel's files with blacklisted extensions can be still saved to drafts
Medium
Impact
File validation can be configured to reject certain files by file type. When this happens, validation fails, and the content can't be published. However, the file can be saved when saving the content draft. This means unwanted files can be present in storage, even if they are not easily accessible due to the content not being published. The fix ensures these unwanted file types are never stored. An attacker would need to have existing access to create content with a file field type to exploit this.
Patches
See "Patched versions".
Commit: https://github.com/ibexa/core/commit/7e472317f7c75f45f72f74c38406952d8bea0de1
References
https://developers.ibexa.co/security-advisories/ibexa-sa-2024-002-file-validation-and-workflow-stages
Affected versions
v4.5.0
v4.5.1
v4.5.2
v4.5.3
v4.5.4
v4.5.5
v4.6.0
v4.6.1
Updated Nov 29, 2024 · Source: OSV.dev
Feb 28, 2024
Released
Feb 28, 2024
Runtime
^7.4 || ^8.0
Checksum
Dependencies
(42)
composer/package-versions-deprecated
^1.11
doctrine/dbal
^2.13.0
doctrine/doctrine-bundle
^2.0
doctrine/orm
^2.7
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^2.8
friendsofsymfony/jsrouting-bundle
^2.5
guzzlehttp/guzzle
^6.5
+ 34 more
v4.6.0
minor
1 CVE
GHSA-9j39-4686-m3c4
Mar 20, 2024
Ibexa Kernel's files with blacklisted extensions can be still saved to drafts
Medium
Impact
File validation can be configured to reject certain files by file type. When this happens, validation fails, and the content can't be published. However, the file can be saved when saving the content draft. This means unwanted files can be present in storage, even if they are not easily accessible due to the content not being published. The fix ensures these unwanted file types are never stored. An attacker would need to have existing access to create content with a file field type to exploit this.
Patches
See "Patched versions".
Commit: https://github.com/ibexa/core/commit/7e472317f7c75f45f72f74c38406952d8bea0de1
References
https://developers.ibexa.co/security-advisories/ibexa-sa-2024-002-file-validation-and-workflow-stages
Affected versions
v4.5.0
v4.5.1
v4.5.2
v4.5.3
v4.5.4
v4.5.5
v4.6.0
v4.6.1
Updated Nov 29, 2024 · Source: OSV.dev
Feb 13, 2024
Released
Feb 13, 2024
Checksum
v4.5.5
patch
1 CVE
GHSA-9j39-4686-m3c4
Mar 20, 2024
Ibexa Kernel's files with blacklisted extensions can be still saved to drafts
Medium
Impact
File validation can be configured to reject certain files by file type. When this happens, validation fails, and the content can't be published. However, the file can be saved when saving the content draft. This means unwanted files can be present in storage, even if they are not easily accessible due to the content not being published. The fix ensures these unwanted file types are never stored. An attacker would need to have existing access to create content with a file field type to exploit this.
Patches
See "Patched versions".
Commit: https://github.com/ibexa/core/commit/7e472317f7c75f45f72f74c38406952d8bea0de1
References
https://developers.ibexa.co/security-advisories/ibexa-sa-2024-002-file-validation-and-workflow-stages
Affected versions
v4.5.0
v4.5.1
v4.5.2
v4.5.3
v4.5.4
v4.5.5
v4.6.0
v4.6.1
Updated Nov 29, 2024 · Source: OSV.dev
Feb 05, 2024
Released
Feb 05, 2024
Checksum
v4.6.0-rc1
pre
Jan 24, 2024
Released
Jan 24, 2024
Runtime
^7.4 || ^8.0
Checksum
Dependencies
(42)
composer/package-versions-deprecated
^1.11
doctrine/dbal
^2.13.0
doctrine/doctrine-bundle
^2.0
doctrine/orm
^2.7
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^2.8
friendsofsymfony/jsrouting-bundle
^2.5
guzzlehttp/guzzle
^6.5
+ 34 more
v4.6.0-beta5
pre
Jan 18, 2024
Released
Jan 18, 2024
Runtime
^7.4 || ^8.0
Checksum
Dependencies
(42)
composer/package-versions-deprecated
^1.11
doctrine/dbal
^2.13.0
doctrine/doctrine-bundle
^2.0
doctrine/orm
^2.7
friendsofphp/proxy-manager-lts
^1.0
friendsofsymfony/http-cache-bundle
^2.8
friendsofsymfony/jsrouting-bundle
^2.5
guzzlehttp/guzzle
^6.5
+ 34 more
v4.6.0-beta4
pre
Dec 18, 2023
Released
Dec 18, 2023
Checksum
View on Github