Advisories for packages from krayin

Listing reported advisories for packages from krayin sorted by their report date.

Webkul Krayin CRM is Vulnerable to Cross-Site Scripting in the /admin/activities/create endpoint
GitHub

krayin/laravel-crm

= 2.1.5

2026-05-12 16:20:23
Krayin CRM allows a remote attacker to execute arbitrary code via compose email function
GitHub

krayin/laravel-crm

= 2.1.5

2026-05-07 01:16:53
Webkul Krayin CRM has Server-Side Request Forgery (SSRF)
GitHub

krayin/laravel-crm

<= 2.2.0

2026-04-16 01:32:30
Webkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonController.php
GitHub

krayin/laravel-crm

<= 2.2.0

2026-04-16 01:32:20
Webkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Settings/UserController.php
GitHub

krayin/laravel-crm

<= 2.2.0

2026-04-16 01:31:49
Webkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadController.php
GitHub

krayin/laravel-crm

<= 2.2.0

2026-04-16 01:31:39
Krayin CRM is vulnerable to Cross-site Scripting (XSS)
GitHub

krayin/laravel-crm

<= 2.2.0

2026-04-04 06:19:41
Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name
GitHub

krayin/laravel-crm

<= 1.3.0

2024-10-07 19:27:15
Cross-site Scripting in krayin/laravel-crm
GitHub

krayin/laravel-crm

< 1.2.2

2022-06-22 18:10:24

Need help?

We are happy to help you with any questions you might have.

Documentation Roadmap Report a bug Get in touch