Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

tpwd/ke_search

5 known vulnerabilities (4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 4 medium
Registry
Packagist

Advisories 5

  • CVE-2026-46724Medium 5.9

    Path Traversal in extension "Faceted Search" (ke_search)

    Affected: from 7.0.0, fixed in 7.0.1; from 6.0.0, fixed in 6.6.1; from 5.0.0, fixed in 5.6.2; fixed in 4.6.7; from 7.0.0, fixed in 7.0.1; from 6.0.0, fixed in 6.6.1; from 5.0.0, fixed in 5.6.2; fixed in 4.6.7.

  • CVE-2026-46723Medium 5.9

    Information Disclosure in extension "Faceted Search" (ke_search)

    Affected: from 7.0.0, fixed in 7.0.1; from 6.0.0, fixed in 6.6.1; fixed in 5.6.2; from 7.0.0, fixed in 7.0.1; from 6.0.0, fixed in 6.6.1; from 5.0.0, fixed in 5.6.2; fixed in 4.6.7.

  • CVE-2026-46722Medium 5.9

    XML External Entity Injection in extension "Faceted Search" (ke_search)

    Affected: from 7.0.0, fixed in 7.0.1; from 6.0.0, fixed in 6.6.1; from 5.0.0, fixed in 5.6.2; fixed in 4.6.7; from 7.0.0, fixed in 7.0.1; from 6.0.0, fixed in 6.6.1; from 5.0.0, fixed in 5.6.2; fixed in 4.6.7.

  • CVE-2023-35783Medium 6.3

    The ke_search (aka Faceted Search) extension before 4.0.3, 4.1.x through 4.6.x before 4.6.6, and 5.x before 5.0.2 for TYPO3 allows XSS via…

    Affected: from 5.0.0, fixed in 5.0.2; from 4.1.0, fixed in 4.6.6; fixed in 4.0.3.

  • The ke_search (aka Faceted Search) extension through 2.8.2, and 3.x through 3.1.3, for TYPO3 allows XSS.

    Affected: from 3.0.0, fixed in 3.1.4; fixed in 2.8.3.