Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

tcg/voyager

5 known vulnerabilities (2 critical, 2 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 2 critical, 2 medium, 1 low
Registry
Packagist

Advisories 5

  • CVE-2025-32931Critical 9.1

    DevDojo Voyager 1.4.0 through 1.8.0, when Laravel 8 or later is used, allows authenticated administrators to execute arbitrary OS commands…

    Affected: from 1.4.0, through 1.8.0.

  • CVE-2024-55417Medium 4.3

    DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via…

    Affected: through 1.8.0.

  • DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass.

    Affected: through 1.8.0.

  • CVE-2024-55415Medium 5.7

    DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.

    Affected: through 1.8.0.

  • CVE-2020-36070Critical 9.8

    Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php…

    Affected: through 1.4.0.