- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2 · 1 high, 1 low
- Registry
- Packagist
Advisories 2
- CVE-2026-42224High 7.6
ipl/web is vulnerable to reflected XSS by malformed search requests
Affected: from 0.11.0, fixed in 0.13.1; fixed in 0.10.3.
- CVE-2024-41811Low 3.9
ipl/web susceptible to Cross-Site Request Forgery (CSRF)
Affected: fixed in 0.10.1.