EasyAdminBundle vulnerabilities

2 known vulnerabilities in EasyAdminBundle from EasyCorp. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  EasyAdminBundle: Improper Neutralization of Input During Web Page Generation

  CVE-2026-54087Sep 14, 2026EasyCorp

  EasyAdmin is a fast and modern admin generator for Symfony applications. From 5.0.0 until 5.0.13, FileField and ImageField can accept browser-executable uploads while templates/crud/field/file.html.twig links to stored files for inline same-origin rendering wi

• 8.1 High severity

  EasyAdminBundle: Authorization Bypass Through User-Controlled Key

  CVE-2026-81892Aug 31, 2026EasyCorp

  EasyAdmin is a fast and modern admin generator for Symfony applications. From 4.0.0 until 4.29.16 and 5.5.1, EasyAdmin serves all backend requests through a single dashboard route and, for custom actions (Action::linkToRoute() and MenuItem::linkToRoute()), swa