Kirby vulnerabilities
CVEs whose affected-version data names the Kirby package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-108924Medium· 4.3PoCA vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3
A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery::resolve of the file src/Option/OptionsQuery.php of the component Dynamic Option Generation. The manipulation leads t…
▾ Twilightgetkirby · KirbyEPSS 0.31%via NVD
CVE-2018-14519Medium· 4.3An issue was discovered in Kirby 2.5.12
An issue was discovered in Kirby 2.5.12. The delete page functionality suffers from a CSRF flaw. A remote attacker can craft a malicious CSRF page and force the user to delete a page.
▾ Sunlitgetkirby · kirbyEPSS 0.50%via NVD