Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

mediawiki/cargo

3 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 medium
Registry
Packagist

Advisories 3

  • CVE-2025-62671Medium 6.9

    Stored XSS through wikitext in Cargo

    Affected: fixed in 3.8.3.

  • CVE-2024-47847Medium 6.9

    Various XSSes found in Cargo

    Affected: fixed in 3.6.1.

  • CVE-2024-23173Medium 6.1

    An issue was discovered in the Cargo extension in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2.

    Affected: fixed in 1.35.14; from 1.36.0, fixed in 1.39.6; from 1.40.0, fixed in 1.40.2.