dynamic-user-directory vulnerabilities
CVEs whose affected-version data names the dynamic-user-directory package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-42719Critical· 9.8Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.
Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions.
▾ MidnightSarah Giles · dynamic-user-directoryEPSS 0.51%via NVD
CVE-2026-42720High· 7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/…
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/…
▾ TwilightSarah Giles · dynamic-user-directoryEPSS 0.23%via NVD