Vulnerability Database

352,427

Total vulnerabilities in the database

Vulnerabilities for products matching "framework"

Found 18 matching products. Filters apply to all results.

You can search for specific versions with /product/framework/1.2.3

horde / framework

1 vulnerabilities found
Title Severity Exploit Date Affected Version
Medium January 11, 2008 1/11/08
== 3.1.5

zend / framework

64 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical October 25, 2019 10/25/19
>= 2.3.0 < 2.3.5
< 2.2.10
Medium September 24, 2011 9/24/11
== 1.11.3
Medium December 24, 2009 12/24/09
== 0.9.0-beta
== 1.7.3
== 1.9.0-beta_1
== 1.9.2
== 1.7.5
== 1.0.0
== 0.1.3-preview
== 1.5.2
== 0.9.1-beta
== 0.8.0-preview
== 1.9.0-alpha_1
== 1.0.0-rc1
== 1.5.1
== 1.7.7
== 1.0.1
== 1.5.3
== 1.9
== 1.7.2
== 1.7.8
== 0.1.5-preview
<= 1.9.6
== 1.0.0-rc3
== 1.9.0-rc1
== 1.5.0
== 1.7.1
== 1.5.0-rc1
== 1.8.0-alpha_1
== 1.0.0-rc2
== 1.7.0
== 1.6.0-rc3
== 1.6.2
== 1.8.3
== 1.6.0-rc2
== 1.5.0-rc2
== 1.9.5
== 1.5.0-rc3
== 1.8.2
== 1.8.0-beta_1
== 1.8.0
== 1.6.1
== 1.0.2
== 1.7.0-preview
== 1.7.6
== 1.9.1
== 1.0.4
== 0.9.2-beta
== 1.9.0
== 0.9.3-beta
== 1.6.0
== 1.8.1
== 1.7.4
== 0.6.0-preview
== 1.9.3
== 0.1.4-preview
== 0.2.0-preview
== 1.9.4
== 1.6.0-rc1
== 1.8.4
== 0.7.0-preview
== 1.0.3
== 1.5.0-preview

themify / framework

1 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical June 17, 2021 6/17/21
< 1.2.2

schben / framework

1 vulnerabilities found
Title Severity Exploit Date Affected Version
Low August 13, 2019 8/13/19
<= 2.0.7

adive / framework

5 vulnerabilities found
Title Severity Exploit Date Affected Version
High April 30, 2024 4/30/24
== 2.0.8
High April 30, 2024 4/30/24
== 2.0.8
Medium January 26, 2020 1/26/20
== 2.0.8
Medium January 26, 2020 1/26/20
== 2.0.8
High January 26, 2020 1/26/20
== 2.0.8
Composer icon

laravel / framework

57 vulnerabilities found
Title Severity Exploit Date Affected Version
Medium June 17, 2026 6/17/26
>= 13.0.0 < 13.12.0
< 12.61.1
High June 17, 2026 6/17/26
>= 13.0.0 < 13.10.0
< 12.60.0
Medium March 10, 2025 3/10/25
>= 11.9.0 < 11.36.0
Medium March 10, 2025 3/10/25
>= 11.9.0 < 11.36.0
Medium March 5, 2025 3/5/25
>= 12.0.0 < 12.1.1
>= 11.0.0 < 11.44.1
< 10.48.29
< 11.44.1
High November 12, 2024 11/12/24
< 6.20.45
>= 7.0.0 < 7.30.7
>= 8.0.0 < 8.83.28
>= 9.0.0 < 9.52.17
>= 10.0.0 < 10.48.23
>= 11.0.0 < 11.31.0
High May 15, 2024 5/15/24
>= 6.0.0 < 6.20.26
>= 7.0.0 < 7.30.5
>= 8.0.0 < 8.40.0
High May 15, 2024 5/15/24
>= 6.0.0 < 6.20.14
>= 7.0.0 < 7.30.4
>= 8.0.0 < 8.24.0
Medium May 15, 2024 5/15/24
>= 5.5.0 <= 5.5.49
>= 6.0.0 < 6.18.34
>= 7.0.0 < 7.23.2
Critical May 15, 2024 5/15/24
>= 4.1.0 < 6.18.31
>= 7.0.0 < 7.22.4
Medium May 15, 2024 5/15/24
>= 7.0.0 < 7.1.2
High May 15, 2024 5/15/24
>= 5.5.0 < 5.6.30
Medium May 15, 2024 5/15/24
< 5.5.40
>= 5.6.0 < 5.6.15
Medium May 15, 2024 5/15/24
>= 4.0.0 < 4.1.26
Medium May 15, 2024 5/15/24
>= 4.0.0 < 4.1.29
Medium April 25, 2023 4/25/23
>= 8.0.0 < 8.83.24
>= 9.0.0 < 9.32.0
Critical May 14, 2022 5/14/22
>= 5.7.0 < 6.20.44
High December 20, 2021 12/20/21
< 5.8.17
Medium December 8, 2021 12/8/21
< 6.20.42
>= 7.0.0 < 7.30.6
>= 8.0.0 < 8.75.0
Critical November 14, 2021 11/14/21
<= 8.70.2
High April 29, 2021 4/29/21
>= 8.0.0 < 8.40.0
< 6.20.26
High February 2, 2021 2/2/21
< 6.20.14
>= 7.0.0 < 7.30.4
>= 8.0.0 < 8.24.0
High January 19, 2021 1/19/21
>= 8.0.0 < 8.22.1
>= 6.0.0 < 6.20.11
>= 7.0.0 < 7.30.2
High September 4, 2020 9/4/20
< 6.18.35
>= 7.0.0 < 7.24.0
Medium March 28, 2019 3/28/19
== 5.4.15
High August 9, 2018 8/9/18
<= 5.5.40
>= 5.6.0 < 5.6.30
Medium September 28, 2017 9/28/17
< 5.5.10
Medium May 29, 2017 5/29/17
>= 5.3.0 <= 5.3.31
>= 5.4.0 < 5.4.22
Composer icon

codeigniter4 / framework

17 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical June 11, 2026 6/11/26
< 4.7.3
Critical July 28, 2025 7/28/25
< 4.6.2
Medium July 25, 2025 7/25/25
<= 4.6.2
Medium January 20, 2025 1/20/25
< 4.5.8
High March 29, 2024 3/29/24
< 4.4.7
High October 31, 2023 10/31/23
< 4.4.3
Critical May 30, 2023 5/30/23
< 4.3.5
High December 22, 2022 12/22/22
< 4.2.11
High December 22, 2022 12/22/22
< 4.2.11
Low October 6, 2022 10/6/22
< 4.2.7
Medium February 28, 2022 2/28/22
< 4.1.9
Critical February 28, 2022 2/28/22
< 4.1.9
Medium January 24, 2022 1/24/22
< 4.1.8
High January 4, 2022 1/4/22
< 4.1.6
High March 23, 2020 3/23/20
<= 4.0.0
High November 17, 2017 11/17/17
== 3.1.3
>= 3.1.3 < 3.1.4
Composer icon

silverstripe / framework

203 vulnerabilities found
Title Severity Exploit Date Affected Version
Medium April 10, 2025 4/10/25
>= 4.0.0 < 5.3.23
Medium April 10, 2025 4/10/25
< 5.3.23
<= 5.3.23
Low January 23, 2025 1/23/25
< 5.3.8
Medium January 14, 2025 1/14/25
< 5.3.8
Medium January 14, 2025 1/14/25
< 5.3.8
Low January 14, 2025 1/14/25
< 5.3.8
Medium July 17, 2024 7/17/24
< 5.2.16
Medium July 17, 2024 7/17/24
< 5.2.16
High May 28, 2024 5/28/24
>= 4.0.0-rc1 < 4.0.6
>= 4.1.0-rc1 < 4.1.4
>= 4.2.0-rc1 < 4.2.3
High May 28, 2024 5/28/24
>= 4.0.0-rc1 < 4.0.5
>= 4.1.0-rc1 < 4.1.3
>= 4.2.0-rc1 < 4.2.2
Medium May 28, 2024 5/28/24
>= 3.7.0-rc1 < 3.7.1
>= 4.0.0-rc1 < 4.0.5
>= 4.1.0-rc1 < 4.1.3
>= 4.2.0-rc1 < 4.2.2
High May 27, 2024 5/27/24
>= 3.6.5-rc1 < 3.6.6
>= 4.0.3-rc1 < 4.0.4
>= 4.1.0-rc1 < 4.1.1
Medium May 27, 2024 5/27/24
>= 4.0.0-rc1 < 4.0.4
>= 4.1.0-rc1 < 4.1.1
Low May 27, 2024 5/27/24
>= 3.5.5-rc1 < 3.7.0
>= 4.0.3-rc1 < 4.0.4
>= 4.1.0-rc1 < 4.1.1
Medium May 27, 2024 5/27/24
>= 4.0.0-rc1 < 4.0.4
>= 4.1.0-rc1 < 4.1.1
High May 27, 2024 5/27/24
>= 4.0.3-rc1 < 4.0.4
>= 4.1.0-rc1 < 4.1.1
High May 27, 2024 5/27/24
>= 4.0.0-rc1 < 4.0.4
>= 4.1.0-rc1 < 4.1.1
Medium May 27, 2024 5/27/24
>= 4.0.0-rc1 < 4.0.1
Medium May 27, 2024 5/27/24
>= 3.5.7-rc1 < 3.5.8
>= 3.6.0-rc1 < 3.6.6
>= 4.0.0-rc1 < 4.0.4
>= 4.1.0-rc1 < 4.1.1
Medium May 27, 2024 5/27/24
>= 4.0.0-rc1 < 4.0.4
>= 4.1.0rc1 < 4.1.1
High May 27, 2024 5/27/24
>= 3.5.0-rc1 < 3.5.6
>= 3.6.0-rc1 < 3.6.3
>= 4.0.0-rc1 < 4.0.1
Medium May 27, 2024 5/27/24
>= 3.5.0-rc1 < 3.5.6
>= 3.6.0-rc1 < 3.6.3
>= 4.0.0-rc1 < 4.0.1
High May 27, 2024 5/27/24
>= 3.5.0-rc1 < 3.5.6
>= 3.6.0-rc1 < 3.6.3
>= 4.0.0-rc1 < 4.0.1
High May 27, 2024 5/27/24
>= 3.5.0-rc1 < 3.5.5
>= 3.6.0-rc1 < 3.6.2
High May 27, 2024 5/27/24
>= 3.5.0-rc1 < 3.5.6
>= 3.6.0-rc1 < 3.6.3
Medium May 27, 2024 5/27/24
>= 3.4.0-rc1 < 3.4.6
>= 3.5.0-rc1 < 3.5.4
Medium May 27, 2024 5/27/24
>= 3.4.0-rc1 < 3.4.6
>= 3.5.0-rc1 < 3.5.4
Medium May 27, 2024 5/27/24
>= 3.1.0-rc1 < 3.1.21
>= 3.2.0-rc1 < 3.2.6
>= 3.3.0-rc1 < 3.3.4
>= 3.4.0-rc1 < 3.4.2
Medium May 27, 2024 5/27/24
>= 3.4.0-rc1 < 3.4.4
>= 3.5.0-rc1 < 3.5.2
Medium May 27, 2024 5/27/24
>= 3.4.0-rc1 < 3.4.6
>= 3.5.0-rc1 < 3.5.4
Medium May 27, 2024 5/27/24
>= 3.1.19-rc1 < 3.1.20
>= 3.2.4-rc1 < 3.2.5
>= 3.3.2-rc1 < 3.3.3
>= 3.4.0-rc1 < 3.4.1
Medium May 27, 2024 5/27/24
>= 3.1.9-rc1 < 3.1.20
>= 3.2.4-rc1 < 3.2.5
>= 3.3.2-rc1 < 3.3.3
>= 3.4.0-rc1 < 3.4.1
Low May 27, 2024 5/27/24
>= 3.1.19-rc1 < 3.1.20
>= 3.2.4-rc1 < 3.2.5
>= 3.3.2-rc1 < 3.3.3
>= 3.4.0-rc1 < 3.4.1
Medium May 27, 2024 5/27/24
>= 3.1.19-rc1 < 3.1.20
>= 3.2.4-rc1 < 3.2.5
>= 3.3.2-rc1 < 3.3.3
>= 3.4.0-rc1 < 3.4.1
Medium May 27, 2024 5/27/24
>= 3.1.19-rc1 < 3.1.20
>= 3.2.4-rc1 < 3.2.5
>= 3.3.2-rc1 < 3.3.3
>= 3.4.0-rc1 < 3.4.1
Low May 27, 2024 5/27/24
>= 3.1.19-rc1 < 3.1.20
>= 3.2.4-rc1 < 3.2.5
>= 3.3.2-rc1 < 3.3.3
>= 3.4.0-rc1 < 3.4.1
Medium May 23, 2024 5/23/24
< 3.1.21
>= 3.2.0 < 3.2.6
>= 3.3.0 < 3.3.4
>= 3.4.0 < 3.4.2
Medium May 23, 2024 5/23/24
>= 3.3.2 < 3.3.3
>= 3.4.0 < 3.4.1
Medium May 23, 2024 5/23/24
>= 3.1.18 < 3.1.19
>= 3.2.3 < 3.2.4
>= 3.3.1 < 3.3.2
Critical May 23, 2024 5/23/24
>= 3.1.18 < 3.1.19
>= 3.2.3 < 3.2.4
>= 3.3.1 < 3.3.2
Medium May 23, 2024 5/23/24
>= 3.1.18 < 3.1.19
>= 3.2.3 < 3.2.4
>= 3.3.1 < 3.3.2
Medium May 23, 2024 5/23/24
< 3.1.17
>= 3.2.0 < 3.2.2
>= 3.3.0-beta1 < 3.3.0
Medium May 23, 2024 5/23/24
< 3.1.17
>= 3.2.0 < 3.2.2
>= 3.3.0-beta1 < 3.3.0
Medium May 23, 2024 5/23/24
< 3.1.17
>= 3.2.0 < 3.2.2
>= 3.3.0-beta1 < 3.3.0
Medium May 23, 2024 5/23/24
>= 3.0.0 < 3.2.1
Medium May 23, 2024 5/23/24
>= 3.0.0 < 3.1.16
>= 3.2.0 < 3.2.1
Medium May 23, 2024 5/23/24
>= 3.1.0 < 3.1.14
Medium May 23, 2024 5/23/24
>= 3.0.0 < 3.0.14
>= 3.1.0 < 3.1.13
Medium May 23, 2024 5/23/24
< 3.1.14
Medium May 23, 2024 5/23/24
< 3.0.14
>= 3.1.0 < 3.1.13
Composer icon

topthink / framework

22 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical August 5, 2025 8/5/25
<= 5.1.41
Critical September 9, 2024 9/9/24
>= 6.1.3 <= 8.0.4
Medium May 4, 2024 5/4/24
>= 8.0.0 < 8.0.4
>= 6.1.0 < 6.1.5
< 6.0.17
Critical December 23, 2022 12/23/22
< 6.0.14
High December 6, 2022 12/6/22
<= 5.0.24
>= 5.1 <= 5.1.41
Critical September 15, 2022 9/15/22
<= 6.0.13
Critical June 29, 2022 6/29/22
<= 6.0.12
Critical May 6, 2022 5/6/22
< 6.0.12
High March 21, 2022 3/21/22
<= 5.0.24
High February 10, 2022 2/10/22
<= 3.2.3
Critical December 15, 2021 12/15/21
>= 5.0 <= 5.1.22
Critical December 6, 2021 12/6/21
< 6.0.9
Critical December 6, 2021 12/6/21
<= 6.0.8
Critical October 21, 2018 10/21/18
<= 3.2.4
Critical October 19, 2018 10/19/18
<= 3.2.4
Critical October 19, 2018 10/19/18
<= 5.1.25
Critical September 26, 2018 9/26/18
== 5.1.24
Critical September 3, 2018 9/3/18
< 5.1.23
Critical April 19, 2018 4/19/18
== 3.1.3

nuxt / framework

24 vulnerabilities found
Title Severity Exploit Date Affected Version
Medium December 12, 2022 12/12/22
== 3.0.0-rc2
== 3.0.0-rc3
== 3.0.0-rc4
== 3.0.0-rc5
== 3.0.0-rc6
== 3.0.0-rc7
== 3.0.0-rc8
== 3.0.0-rc9
== 3.0.0-rc10
== 3.0.0-rc11
== 3.0.0-rc12
== 3.0.0-rc1
Medium December 12, 2022 12/12/22
== 3.0.0-rc2
== 3.0.0-rc3
== 3.0.0-rc4
== 3.0.0-rc5
== 3.0.0-rc6
== 3.0.0-rc7
== 3.0.0-rc8
== 3.0.0-rc9
== 3.0.0-rc10
== 3.0.0-rc11
== 3.0.0-rc12
== 3.0.0-rc1
Composer icon

matyhtf / framework

1 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical December 3, 2021 12/3/21
< 3.0.6
Composer icon

codeigniter / framework

5 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical May 15, 2024 5/15/24
< 3.1.0
Medium May 15, 2024 5/15/24
< 3.0.3
High August 11, 2023 8/11/23
< 1.4.10
Critical June 17, 2018 6/17/18
< 3.1.10
Critical September 19, 2017 9/19/17
< 3.0.0
Composer icon

flarum / framework

4 vulnerabilities found
Title Severity Exploit Date Affected Version
Medium March 12, 2025 3/12/25
< 1.8.10
Medium January 5, 2024 1/5/24
< 1.8.5
High August 16, 2023 8/16/23
< 1.8.0
Medium November 9, 2018 11/9/18
<= 0.1.0-beta.7.1
Composer icon

titon / framework

1 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical May 30, 2024 5/30/24
<= 0.1.0-alpha

basticom / framework

1 vulnerabilities found
Title Severity Exploit Date Affected Version
Medium November 5, 2024 11/5/24
< 1.5.1
Composer icon

Joomla / framework

3 vulnerabilities found
Title Severity Exploit Date Affected Version
High October 9, 2018 10/9/18
>= 2.5.4 < 3.8.13
Medium September 18, 2008 9/18/08
>= 1.5.0 < 1.5.7
High July 18, 2008 7/18/08
< 1.5.4
Composer icon

shopper / framework

6 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical June 5, 2026 6/5/26
< 2.8.0
High June 5, 2026 6/5/26
< 2.8.0
Medium June 5, 2026 6/5/26
< 2.8.0
Medium June 5, 2026 6/5/26
< 2.8.0
High May 18, 2026 5/18/26
< 2.8.0
High May 18, 2026 5/18/26
< 2.8.0

Showing vulnerabilities for 18 products matching "framework". Each product has independent pagination.

Frequently Asked Questions

A security vulnerability is a weakness in software, hardware, or configuration that can be exploited to compromise confidentiality, integrity, or availability. Many vulnerabilities are tracked as CVEs (Common Vulnerabilities and Exposures), which provide a standardized identifier so teams can coordinate patching, mitigation, and risk assessment across tools and vendors.

CVSS (Common Vulnerability Scoring System) estimates technical severity, but it doesn't automatically equal business risk. Prioritize using context like internet exposure, affected asset criticality, known exploitation (proof-of-concept or in-the-wild), and whether compensating controls exist. A "Medium" CVSS on an exposed, production system can be more urgent than a "Critical" on an isolated, non-production host.

A vulnerability is the underlying weakness. An exploit is the method or code used to take advantage of it. A zero-day is a vulnerability that is unknown to the vendor or has no publicly available fix when attackers begin using it. In practice, risk increases sharply when exploitation becomes reliable or widespread.

Recurring findings usually come from incomplete Asset Discovery, inconsistent patch management, inherited images, and configuration drift. In modern environments, you also need to watch the software supply chain: dependencies, containers, build pipelines, and third-party services can reintroduce the same weakness even after you patch a single host. Unknown or unmanaged assets (often called Shadow IT) are a common reason the same issues resurface.

Use a simple, repeatable triage model: focus first on externally exposed assets, high-value systems (identity, VPN, email, production), vulnerabilities with known exploits, and issues that enable remote code execution or privilege escalation. Then enforce patch SLAs and track progress using consistent metrics so remediation is steady, not reactive.

SynScan combines attack surface monitoring and continuous security auditing to keep your inventory current, flag high-impact vulnerabilities early, and help you turn raw findings into a practical remediation plan.