Advisories for package s9y/serendipity

Listing reported advisories for package s9y/serendipity sorted by their report date.

Serendipity has a Host Header Injection allows SMTP header injection via unvalidated HTTP_HOST in Message-ID email header
GitHub

s9y/serendipity

< 2.6.0

2026-04-14 22:32:40
Serendipity has a Host Header Injection allows authentication cookie scoping to attacker-controlled domain in functions_config.inc.php
GitHub

s9y/serendipity

< 2.6.0

2026-04-14 22:32:30

Need help?

We are happy to help you with any questions you might have.

Documentation Roadmap Report a bug Get in touch