symbiote/silverstripe-advancedworkflow
A highly configurable step-based workflow module.
View on Github
Activity
- Latest release
- 3w ago
- Total releases
- 112
- Cadence
- ~12 days
- Last 12 months
- 10
Reach
- Stars
- 46
Details
- License
- BSD-3-Clause
- First release
- Dec 10, 2012
Releases
| Version | Released | |
|---|---|---|
7.2.3
patch
| ||
7.2.2
patch
| ||
7.2.1
patch
| ||
6.4.5
patch
| ||
7.1.3
patch
| ||
7.2.0
minor
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
7.1.2
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.4.4
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
7.1.1
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.4.3
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
7.1.0
minor
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
7.1.0-beta1
pre
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
7.0.2
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.4.2
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
7.0.1
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
7.0.0
major
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
7.0.0-rc1
pre
| ||
6.4.1
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.4.0
minor
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.3.1
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
7.0.0-beta1
pre
| ||
6.4.0-rc1
pre
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
7.0.0-alpha1
pre
| ||
6.3.0
minor
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.2.4
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
5.9.7
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.2.3
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.2.2
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.2.1
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.2.0
minor
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.1.4
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.2.0-beta1
pre
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.0.4
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
5.9.6
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.1.3
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.1.2
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
5.9.5
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.1.1
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
5.9.4
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.1.0
minor
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.0.3
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
5.9.3
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.1.0-beta1
pre
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.0.2
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.0.1
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
5.9.2
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
5.9.1
patch
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.0.0
major
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
6.0.0-rc1
pre
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev | ||
5.9.0
minor
1 CVE
CVE-2026-54718
GHSA-39mm-rwm3-29jp
Aug 27, 2026
silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template
7.2
/ 10
High
Network
Low
High
None
Unchanged
High
High
High
ImpactThe advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported bySteve Boyd Silverstripe Ltd. Affected versions
2.1.0
3.0.1
3.0.1-rc1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.1.0
3.1.1
3.1.2
3.1.3
+ 107 more Show less
3.2.0
3.2.1
3.2.2
3.2.3
3.3.0
3.3.1
3.3.2
3.3.3
3.4.0
3.5.0
3.6.0
3.6.1
3.7.0
3.7.1
3.7.2
3.8.0
3.8.1
3.8.2
3.9.0
3.9.1
4.0.0
4.0.1
4.1.0
4.2.0
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.0.6
5.0.7
5.0.8
5.1.0
5.1.1
5.1.2
5.2.0
5.2.1
5.2.2
5.3.0
5.3.1
5.4.0
5.4.0-beta1
5.4.0-rc1
5.5.0
5.5.0-alpha1
5.5.0-beta1
5.5.0-rc1
5.5.1
5.6.0
5.6.0-beta1
5.6.0-rc1
5.7.0
5.8.0
5.8.0-beta1
5.8.0-rc1
5.9.0
5.9.0-beta1
5.9.0-rc1
5.9.1
5.9.2
5.9.3
5.9.4
5.9.5
5.9.6
5.9.7
6.0.0
6.0.0-beta1
6.0.0-rc1
6.0.1
6.0.2
6.0.3
6.0.4
6.1.0
6.1.0-beta1
6.1.0-rc1
6.1.1
6.1.2
6.1.3
6.1.4
6.2.0
6.2.0-beta1
6.2.0-rc1
6.2.1
6.2.2
6.2.3
6.2.4
6.3.0
6.3.0-beta1
6.3.0-rc1
6.3.1
6.4.0
6.4.0-beta1
6.4.0-rc1
6.4.1
6.4.2
6.4.3
6.4.4
7.0.0
7.0.1
7.0.2
7.1.0
7.1.0-beta1
7.1.0-rc1
7.1.1
7.1.2
7.2.0
Fixed in
6.4.5
7.1.3
7.2.1
References
Updated Sep 11, 2026 · Source: OSV.dev |
1–50 of 112