Vulnerability Database

357,869

Total vulnerabilities in the database

Vulnerabilities for products matching "framework"

Found 18 matching products. Filters apply to all results.

You can search for specific versions with /product/framework/1.2.3

horde / framework

1 vulnerabilities found
Title Severity Exploit Date Affected Version
Medium January 11, 2008 1/11/08
== 3.1.5

zend / framework

64 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical October 25, 2019 10/25/19
>= 2.3.0 < 2.3.5
< 2.2.10
Medium September 24, 2011 9/24/11
== 1.11.3
Medium December 24, 2009 12/24/09
== 0.9.0-beta
== 1.7.3
== 1.9.0-beta_1
== 1.9.2
== 1.7.5
== 1.0.0
== 0.1.3-preview
== 1.5.2
== 0.9.1-beta
== 0.8.0-preview
== 1.9.0-alpha_1
== 1.0.0-rc1
== 1.5.1
== 1.7.7
== 1.0.1
== 1.5.3
== 1.9
== 1.7.2
== 1.7.8
== 0.1.5-preview
<= 1.9.6
== 1.0.0-rc3
== 1.9.0-rc1
== 1.5.0
== 1.7.1
== 1.5.0-rc1
== 1.8.0-alpha_1
== 1.0.0-rc2
== 1.7.0
== 1.6.0-rc3
== 1.6.2
== 1.8.3
== 1.6.0-rc2
== 1.5.0-rc2
== 1.9.5
== 1.5.0-rc3
== 1.8.2
== 1.8.0-beta_1
== 1.8.0
== 1.6.1
== 1.0.2
== 1.7.0-preview
== 1.7.6
== 1.9.1
== 1.0.4
== 0.9.2-beta
== 1.9.0
== 0.9.3-beta
== 1.6.0
== 1.8.1
== 1.7.4
== 0.6.0-preview
== 1.9.3
== 0.1.4-preview
== 0.2.0-preview
== 1.9.4
== 1.6.0-rc1
== 1.8.4
== 0.7.0-preview
== 1.0.3
== 1.5.0-preview

themify / framework

1 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical June 17, 2021 6/17/21
< 1.2.2

schben / framework

1 vulnerabilities found
Title Severity Exploit Date Affected Version
Low August 13, 2019 8/13/19
<= 2.0.7

adive / framework

5 vulnerabilities found
Title Severity Exploit Date Affected Version
High April 30, 2024 4/30/24
== 2.0.8
High April 30, 2024 4/30/24
== 2.0.8
Medium January 26, 2020 1/26/20
== 2.0.8
Medium January 26, 2020 1/26/20
== 2.0.8
High January 26, 2020 1/26/20
== 2.0.8
Composer icon

laravel / framework

57 vulnerabilities found
Title Severity Exploit Date Affected Version
Medium June 17, 2026 6/17/26
>= 13.0.0 < 13.12.0
< 12.61.1
High June 17, 2026 6/17/26
>= 13.0.0 < 13.10.0
< 12.60.0
Medium March 10, 2025 3/10/25
>= 11.9.0 < 11.36.0
Medium March 10, 2025 3/10/25
>= 11.9.0 < 11.36.0
Medium March 5, 2025 3/5/25
>= 12.0.0 < 12.1.1
>= 11.0.0 < 11.44.1
< 10.48.29
< 11.44.1
High November 12, 2024 11/12/24
< 6.20.45
>= 7.0.0 < 7.30.7
>= 8.0.0 < 8.83.28
>= 9.0.0 < 9.52.17
>= 10.0.0 < 10.48.23
>= 11.0.0 < 11.31.0
High May 15, 2024 5/15/24
>= 6.0.0 < 6.20.26
>= 7.0.0 < 7.30.5
>= 8.0.0 < 8.40.0
High May 15, 2024 5/15/24
>= 6.0.0 < 6.20.14
>= 7.0.0 < 7.30.4
>= 8.0.0 < 8.24.0
Medium May 15, 2024 5/15/24
>= 5.5.0 <= 5.5.49
>= 6.0.0 < 6.18.34
>= 7.0.0 < 7.23.2
Critical May 15, 2024 5/15/24
>= 4.1.0 < 6.18.31
>= 7.0.0 < 7.22.4
Medium May 15, 2024 5/15/24
>= 7.0.0 < 7.1.2
High May 15, 2024 5/15/24
>= 5.5.0 < 5.6.30
Medium May 15, 2024 5/15/24
< 5.5.40
>= 5.6.0 < 5.6.15
Medium May 15, 2024 5/15/24
>= 4.0.0 < 4.1.26
Medium May 15, 2024 5/15/24
>= 4.0.0 < 4.1.29
Medium April 25, 2023 4/25/23
>= 8.0.0 < 8.83.24
>= 9.0.0 < 9.32.0
Medium May 17, 2022 5/17/22
>= 5.3.0 <= 5.3.31
>= 5.4.0 < 5.4.22
Medium May 17, 2022 5/17/22
< 5.5.10
Critical May 14, 2022 5/14/22
>= 5.7.0 < 6.20.44
High May 14, 2022 5/14/22
<= 5.5.40
>= 5.6.0 < 5.6.30
High January 6, 2022 1/6/22
< 5.8.17
Medium December 8, 2021 12/8/21
< 6.20.42
>= 7.0.0 < 7.30.6
>= 8.0.0 < 8.75.0
Critical November 14, 2021 11/14/21
<= 8.70.2
High May 6, 2021 5/6/21
< 6.18.35
>= 7.0.0 < 7.24.0
High April 29, 2021 4/29/21
>= 8.0.0 < 8.40.0
< 6.20.26
High February 2, 2021 2/2/21
< 6.20.14
>= 7.0.0 < 7.30.4
>= 8.0.0 < 8.24.0
High January 19, 2021 1/19/21
>= 8.0.0 < 8.22.1
>= 6.0.0 < 6.20.11
>= 7.0.0 < 7.30.2
Medium March 28, 2019 3/28/19
== 5.4.15
Composer icon

codeigniter4 / framework

17 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical June 11, 2026 6/11/26
< 4.7.3
Critical July 28, 2025 7/28/25
< 4.6.2
Medium July 25, 2025 7/25/25
<= 4.6.2
Medium January 21, 2025 1/21/25
< 4.5.8
High March 29, 2024 3/29/24
< 4.4.7
High October 30, 2023 10/30/23
< 4.4.3
Critical May 22, 2023 5/22/23
< 4.3.5
High December 22, 2022 12/22/22
< 4.2.11
High December 22, 2022 12/22/22
< 4.2.11
Low October 6, 2022 10/6/22
< 4.2.7
High May 24, 2022 5/24/22
<= 4.0.0
High May 17, 2022 5/17/22
== 3.1.3
>= 3.1.3 < 3.1.4
Medium March 1, 2022 3/1/22
< 4.1.9
Critical March 1, 2022 3/1/22
< 4.1.9
Medium January 27, 2022 1/27/22
< 4.1.8
High January 6, 2022 1/6/22
< 4.1.6
Composer icon

silverstripe / framework

203 vulnerabilities found
Title Severity Exploit Date Affected Version
Medium April 10, 2025 4/10/25
>= 4.0.0 < 5.3.23
Medium April 10, 2025 4/10/25
< 5.3.23
<= 5.3.23
Low January 23, 2025 1/23/25
< 5.3.8
Low January 14, 2025 1/14/25
< 5.3.8
Medium January 14, 2025 1/14/25
< 5.3.8
Medium January 14, 2025 1/14/25
< 5.3.8
Medium July 17, 2024 7/17/24
< 5.2.16
Medium July 17, 2024 7/17/24
< 5.2.16
High May 28, 2024 5/28/24
>= 4.0.0-rc1 < 4.0.6
>= 4.1.0-rc1 < 4.1.4
>= 4.2.0-rc1 < 4.2.3
High May 28, 2024 5/28/24
>= 4.0.0-rc1 < 4.0.5
>= 4.1.0-rc1 < 4.1.3
>= 4.2.0-rc1 < 4.2.2
Medium May 28, 2024 5/28/24
>= 3.7.0-rc1 < 3.7.1
>= 4.0.0-rc1 < 4.0.5
>= 4.1.0-rc1 < 4.1.3
>= 4.2.0-rc1 < 4.2.2
High May 27, 2024 5/27/24
>= 3.6.5-rc1 < 3.6.6
>= 4.0.3-rc1 < 4.0.4
>= 4.1.0-rc1 < 4.1.1
Medium May 27, 2024 5/27/24
>= 4.0.0-rc1 < 4.0.4
>= 4.1.0-rc1 < 4.1.1
Low May 27, 2024 5/27/24
>= 3.5.5-rc1 < 3.7.0
>= 4.0.3-rc1 < 4.0.4
>= 4.1.0-rc1 < 4.1.1
Medium May 27, 2024 5/27/24
>= 4.0.0-rc1 < 4.0.4
>= 4.1.0-rc1 < 4.1.1
High May 27, 2024 5/27/24
>= 4.0.3-rc1 < 4.0.4
>= 4.1.0-rc1 < 4.1.1
High May 27, 2024 5/27/24
>= 4.0.0-rc1 < 4.0.4
>= 4.1.0-rc1 < 4.1.1
Medium May 27, 2024 5/27/24
>= 4.0.0-rc1 < 4.0.1
Medium May 27, 2024 5/27/24
>= 3.5.7-rc1 < 3.5.8
>= 3.6.0-rc1 < 3.6.6
>= 4.0.0-rc1 < 4.0.4
>= 4.1.0-rc1 < 4.1.1
Medium May 27, 2024 5/27/24
>= 4.0.0-rc1 < 4.0.4
>= 4.1.0rc1 < 4.1.1
High May 27, 2024 5/27/24
>= 3.5.0-rc1 < 3.5.6
>= 3.6.0-rc1 < 3.6.3
>= 4.0.0-rc1 < 4.0.1
Medium May 27, 2024 5/27/24
>= 3.5.0-rc1 < 3.5.6
>= 3.6.0-rc1 < 3.6.3
>= 4.0.0-rc1 < 4.0.1
High May 27, 2024 5/27/24
>= 3.5.0-rc1 < 3.5.6
>= 3.6.0-rc1 < 3.6.3
>= 4.0.0-rc1 < 4.0.1
High May 27, 2024 5/27/24
>= 3.5.0-rc1 < 3.5.5
>= 3.6.0-rc1 < 3.6.2
High May 27, 2024 5/27/24
>= 3.5.0-rc1 < 3.5.6
>= 3.6.0-rc1 < 3.6.3
Medium May 27, 2024 5/27/24
>= 3.4.0-rc1 < 3.4.6
>= 3.5.0-rc1 < 3.5.4
Medium May 27, 2024 5/27/24
>= 3.4.0-rc1 < 3.4.6
>= 3.5.0-rc1 < 3.5.4
Medium May 27, 2024 5/27/24
>= 3.1.0-rc1 < 3.1.21
>= 3.2.0-rc1 < 3.2.6
>= 3.3.0-rc1 < 3.3.4
>= 3.4.0-rc1 < 3.4.2
Medium May 27, 2024 5/27/24
>= 3.4.0-rc1 < 3.4.4
>= 3.5.0-rc1 < 3.5.2
Medium May 27, 2024 5/27/24
>= 3.4.0-rc1 < 3.4.6
>= 3.5.0-rc1 < 3.5.4
Medium May 27, 2024 5/27/24
>= 3.1.19-rc1 < 3.1.20
>= 3.2.4-rc1 < 3.2.5
>= 3.3.2-rc1 < 3.3.3
>= 3.4.0-rc1 < 3.4.1
Medium May 27, 2024 5/27/24
>= 3.1.9-rc1 < 3.1.20
>= 3.2.4-rc1 < 3.2.5
>= 3.3.2-rc1 < 3.3.3
>= 3.4.0-rc1 < 3.4.1
Low May 27, 2024 5/27/24
>= 3.1.19-rc1 < 3.1.20
>= 3.2.4-rc1 < 3.2.5
>= 3.3.2-rc1 < 3.3.3
>= 3.4.0-rc1 < 3.4.1
Medium May 27, 2024 5/27/24
>= 3.1.19-rc1 < 3.1.20
>= 3.2.4-rc1 < 3.2.5
>= 3.3.2-rc1 < 3.3.3
>= 3.4.0-rc1 < 3.4.1
Medium May 27, 2024 5/27/24
>= 3.1.19-rc1 < 3.1.20
>= 3.2.4-rc1 < 3.2.5
>= 3.3.2-rc1 < 3.3.3
>= 3.4.0-rc1 < 3.4.1
Low May 27, 2024 5/27/24
>= 3.1.19-rc1 < 3.1.20
>= 3.2.4-rc1 < 3.2.5
>= 3.3.2-rc1 < 3.3.3
>= 3.4.0-rc1 < 3.4.1
Medium May 23, 2024 5/23/24
< 3.1.21
>= 3.2.0 < 3.2.6
>= 3.3.0 < 3.3.4
>= 3.4.0 < 3.4.2
Medium May 23, 2024 5/23/24
>= 3.3.2 < 3.3.3
>= 3.4.0 < 3.4.1
Medium May 23, 2024 5/23/24
>= 3.1.18 < 3.1.19
>= 3.2.3 < 3.2.4
>= 3.3.1 < 3.3.2
Critical May 23, 2024 5/23/24
>= 3.1.18 < 3.1.19
>= 3.2.3 < 3.2.4
>= 3.3.1 < 3.3.2
Medium May 23, 2024 5/23/24
>= 3.1.18 < 3.1.19
>= 3.2.3 < 3.2.4
>= 3.3.1 < 3.3.2
Medium May 23, 2024 5/23/24
< 3.1.17
>= 3.2.0 < 3.2.2
>= 3.3.0-beta1 < 3.3.0
Medium May 23, 2024 5/23/24
< 3.1.17
>= 3.2.0 < 3.2.2
>= 3.3.0-beta1 < 3.3.0
Medium May 23, 2024 5/23/24
< 3.1.17
>= 3.2.0 < 3.2.2
>= 3.3.0-beta1 < 3.3.0
Medium May 23, 2024 5/23/24
>= 3.0.0 < 3.2.1
Medium May 23, 2024 5/23/24
>= 3.0.0 < 3.1.16
>= 3.2.0 < 3.2.1
Medium May 23, 2024 5/23/24
>= 3.1.0 < 3.1.14
Medium May 23, 2024 5/23/24
>= 3.0.0 < 3.0.14
>= 3.1.0 < 3.1.13
Medium May 23, 2024 5/23/24
< 3.1.14
Medium May 23, 2024 5/23/24
< 3.0.14
>= 3.1.0 < 3.1.13
Composer icon

topthink / framework

22 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical August 5, 2025 8/5/25
<= 5.1.41
Critical September 9, 2024 9/9/24
>= 6.1.3 <= 8.0.4
Medium May 4, 2024 5/4/24
>= 8.0.0 < 8.0.4
>= 6.1.0 < 6.1.5
< 6.0.17
Critical December 23, 2022 12/23/22
< 6.0.14
High December 6, 2022 12/6/22
<= 5.0.24
>= 5.1 <= 5.1.41
Critical September 16, 2022 9/16/22
<= 6.0.13
Critical June 30, 2022 6/30/22
<= 6.0.12
Critical May 14, 2022 5/14/22
== 3.1.3
Critical May 14, 2022 5/14/22
< 5.1.23
Critical May 14, 2022 5/14/22
== 5.1.24
Critical May 14, 2022 5/14/22
<= 3.2.4
Critical May 14, 2022 5/14/22
<= 5.1.25
Critical May 14, 2022 5/14/22
<= 3.2.4
Critical May 7, 2022 5/7/22
< 6.0.12
High March 22, 2022 3/22/22
<= 5.0.24
High February 11, 2022 2/11/22
<= 3.2.3
Critical December 17, 2021 12/17/21
>= 5.0 <= 5.1.22
Critical December 10, 2021 12/10/21
< 6.0.9
Critical December 7, 2021 12/7/21
<= 6.0.8

nuxt / framework

24 vulnerabilities found
Title Severity Exploit Date Affected Version
Medium December 12, 2022 12/12/22
== 3.0.0-rc2
== 3.0.0-rc3
== 3.0.0-rc4
== 3.0.0-rc5
== 3.0.0-rc6
== 3.0.0-rc7
== 3.0.0-rc8
== 3.0.0-rc9
== 3.0.0-rc10
== 3.0.0-rc11
== 3.0.0-rc12
== 3.0.0-rc1
Medium December 12, 2022 12/12/22
== 3.0.0-rc2
== 3.0.0-rc3
== 3.0.0-rc4
== 3.0.0-rc5
== 3.0.0-rc6
== 3.0.0-rc7
== 3.0.0-rc8
== 3.0.0-rc9
== 3.0.0-rc10
== 3.0.0-rc11
== 3.0.0-rc12
== 3.0.0-rc1
Composer icon

matyhtf / framework

1 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical December 4, 2021 12/4/21
< 3.0.6
Composer icon

codeigniter / framework

5 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical May 15, 2024 5/15/24
< 3.1.0
Medium May 15, 2024 5/15/24
< 3.0.3
High August 11, 2023 8/11/23
< 1.4.10
Critical May 14, 2022 5/14/22
< 3.1.10
Critical September 19, 2017 9/19/17
< 3.0.0
Composer icon

flarum / framework

4 vulnerabilities found
Title Severity Exploit Date Affected Version
Medium March 12, 2025 3/12/25
< 1.8.10
Medium January 5, 2024 1/5/24
< 1.8.5
High August 16, 2023 8/16/23
< 1.8.0
Medium May 14, 2022 5/14/22
<= 0.1.0-beta.7.1
Composer icon

titon / framework

1 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical May 30, 2024 5/30/24
<= 0.1.0-alpha

basticom / framework

1 vulnerabilities found
Title Severity Exploit Date Affected Version
Medium November 5, 2024 11/5/24
< 1.5.1
Composer icon

Joomla / framework

3 vulnerabilities found
Title Severity Exploit Date Affected Version
High May 13, 2022 5/13/22
>= 2.5.4 < 3.8.13
Medium September 18, 2008 9/18/08
>= 1.5.0 < 1.5.7
High July 18, 2008 7/18/08
< 1.5.4
Composer icon

shopper / framework

6 vulnerabilities found
Title Severity Exploit Date Affected Version
Critical June 5, 2026 6/5/26
< 2.8.0
High June 5, 2026 6/5/26
< 2.8.0
Medium June 5, 2026 6/5/26
< 2.8.0
Medium June 5, 2026 6/5/26
< 2.8.0
High May 18, 2026 5/18/26
< 2.8.0
High May 18, 2026 5/18/26
< 2.8.0

Showing vulnerabilities for 18 products matching "framework". Each product has independent pagination.

Frequently Asked Questions

A security vulnerability is a weakness in software, hardware, or configuration that can be exploited to compromise confidentiality, integrity, or availability. Many vulnerabilities are tracked as CVEs (Common Vulnerabilities and Exposures), which provide a standardized identifier so teams can coordinate patching, mitigation, and risk assessment across tools and vendors.

CVSS (Common Vulnerability Scoring System) estimates technical severity, but it doesn't automatically equal business risk. Prioritize using context like internet exposure, affected asset criticality, known exploitation (proof-of-concept or in-the-wild), and whether compensating controls exist. A "Medium" CVSS on an exposed, production system can be more urgent than a "Critical" on an isolated, non-production host.

A vulnerability is the underlying weakness. An exploit is the method or code used to take advantage of it. A zero-day is a vulnerability that is unknown to the vendor or has no publicly available fix when attackers begin using it. In practice, risk increases sharply when exploitation becomes reliable or widespread.

Recurring findings usually come from incomplete Asset Discovery, inconsistent patch management, inherited images, and configuration drift. In modern environments, you also need to watch the software supply chain: dependencies, containers, build pipelines, and third-party services can reintroduce the same weakness even after you patch a single host. Unknown or unmanaged assets (often called Shadow IT) are a common reason the same issues resurface.

Use a simple, repeatable triage model: focus first on externally exposed assets, high-value systems (identity, VPN, email, production), vulnerabilities with known exploits, and issues that enable remote code execution or privilege escalation. Then enforce patch SLAs and track progress using consistent metrics so remediation is steady, not reactive.

SynScan combines attack surface monitoring and continuous security auditing to keep your inventory current, flag high-impact vulnerabilities early, and help you turn raw findings into a practical remediation plan.