All packages
OttoKit vulnerabilities
3 known CVE vulnerabilities in OttoKit, translated and rated.
- CVE-2026-49781Critical
There is an unauthenticated PHP Object Injection vulnerability in OttoKit versions <= 1.1.27.
- CVE-2026-32553High
OttoKit versions up to 1.1.35 contain an unauthenticated Server Side Request Forgery (SSRF) vulnerability. An attacker can send requests from the server to internal resources.
- CVE-2026-39479High
The OttoKit suretriggers plugin by Brainstorm Force up to version 1.1.20 inclusive is vulnerable to Blind SQL Injection due to improper neutralization of special elements used in an SQL command.