{"id":625266,"name":"mautic/core","ecosystem":"packagist","description":"Mautic Open Source Distribution","homepage":"","licenses":"GPL-3.0","normalized_licenses":["GPL-3.0"],"repository_url":"https://github.com/mautic/mautic","keywords_array":[],"namespace":"mautic","versions_count":204,"first_release_published_at":"2014-12-03T18:27:02.000Z","latest_release_published_at":"2026-07-07T14:32:02.000Z","latest_release_number":"7.1.3","last_synced_at":"2026-09-01T13:17:33.467Z","created_at":"2022-04-07T10:13:25.000Z","updated_at":"2026-09-01T13:17:33.467Z","registry_url":"https://packagist.org/packages/mautic/core#","install_command":"composer require mautic/core","documentation_url":null,"metadata":{"funding":[{"url":"https://github.com/sponsors/mautic","type":"github"},{"url":"https://www.opencollective.com/mautic","type":"opencollective"}]},"repo_metadata":{"id":37397296,"uuid":"12204147","full_name":"mautic/mautic","owner":"mautic","description":"Mautic: Open Source Marketing Automation Software.","archived":false,"fork":false,"pushed_at":"2026-08-31T16:49:47.000Z","size":308445,"stargazers_count":10425,"open_issues_count":179,"forks_count":3431,"subscribers_count":295,"default_branch":"7.x","last_synced_at":"2026-08-31T19:42:33.282Z","etag":null,"topics":["digital-experience-platform","digitalexperienceplatform","dxp","email-marketing","email-marketing-automation","email-marketing-software","hacktoberfest","marketing-automation","marketing-tools","mautic","open-source","php"],"latest_commit_sha":null,"homepage":"https://www.mautic.org","language":"PHP","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mautic.png","metadata":{"files":{"readme":".github/readme_image.png","changelog":null,"contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE.txt","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":".github/SUPPORT.md","governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":"MAINTAINERS.md","copyright":null,"agents":"AGENTS.md","claude":"CLAUDE.md","gemini":"GEMINI.md","cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"mautic","open_collective":"mautic"}},"created_at":"2013-08-19T00:36:28.000Z","updated_at":"2026-08-31T17:49:57.000Z","dependencies_parsed_at":"2026-08-24T16:03:33.996Z","dependency_job_id":null,"html_url":"https://github.com/mautic/mautic","commit_stats":{"total_commits":22584,"total_committers":463,"mean_commits":48.77753779697624,"dds":0.7957403471484237,"last_synced_commit":"23d5974632eb2f0aa00bf891a69c8256c2b82fa0"},"previous_names":[],"tags_count":207,"template":false,"template_full_name":null,"purl":"pkg:github/mautic/mautic","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mautic","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/refs/heads/7.x","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/sbom","scorecard":{"id":628648,"data":{"date":"2025-08-11","repo":{"name":"github.com/mautic/mautic","commit":"c951c3606f8f316219e5646c78ad683f1f6b26b6"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.8,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: jobLevel 'contents' permission set to 'write': .github/workflows/build-grapesjs-assets.yml:20","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:13","Warn: no topLevel permission defined: .github/workflows/bounties.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/build-grapesjs-assets.yml:15","Info: found token with 'none' permissions: .github/workflows/closed-issue-reply.yaml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/e2e-tests.yml:19","Info: topLevel 'contents' permission set to 'read': .github/workflows/generate-release-notes.yml:11","Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/split-monorepo-in-multi-repo.yml:32","Info: topLevel 'contents' permission set to 'read': .github/workflows/tests.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/transifex.yml:12","Warn: no topLevel permission defined: .github/workflows/validate-json.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 6.0.4 not signed: https://api.github.com/repos/mautic/mautic/releases/238015149","Warn: release artifact 7.0.0-alpha not signed: https://api.github.com/repos/mautic/mautic/releases/237348055","Warn: release artifact 6.0.3 not signed: https://api.github.com/repos/mautic/mautic/releases/229000662","Warn: release artifact 5.2.7 not signed: https://api.github.com/repos/mautic/mautic/releases/228737525","Warn: release artifact 6.0.2 not signed: https://api.github.com/repos/mautic/mautic/releases/221600913","Warn: release artifact 6.0.4 does not have provenance: https://api.github.com/repos/mautic/mautic/releases/238015149","Warn: release artifact 7.0.0-alpha does not have provenance: https://api.github.com/repos/mautic/mautic/releases/237348055","Warn: release artifact 6.0.3 does not have provenance: https://api.github.com/repos/mautic/mautic/releases/229000662","Warn: release artifact 5.2.7 does not have provenance: https://api.github.com/repos/mautic/mautic/releases/228737525","Warn: release artifact 6.0.2 does not have provenance: https://api.github.com/repos/mautic/mautic/releases/221600913"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch '7.x'","Info: 'force pushes' disabled on branch '7.x'","Warn: required approving review count is 1 on branch '7.x'","Warn: codeowners review is not required on branch '7.x'","Warn: no status checks found to merge onto branch '7.x'","Info: PRs are required in order to make changes on branch '7.x'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bounties.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/bounties.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bounties.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/bounties.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-grapesjs-assets.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/build-grapesjs-assets.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-grapesjs-assets.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/build-grapesjs-assets.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-grapesjs-assets.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/build-grapesjs-assets.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/closed-issue-reply.yaml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/closed-issue-reply.yaml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-tests.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/e2e-tests.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-tests.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/e2e-tests.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-tests.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/e2e-tests.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-release-notes.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/generate-release-notes.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-release-notes.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/generate-release-notes.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:194: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:202: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:238: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:251: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:264: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/release.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/split-monorepo-in-multi-repo.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/split-monorepo-in-multi-repo.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/split-monorepo-in-multi-repo.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/split-monorepo-in-multi-repo.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/split-monorepo-in-multi-repo.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/split-monorepo-in-multi-repo.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/split-monorepo-in-multi-repo.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/split-monorepo-in-multi-repo.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:214: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:234: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:309: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/tests.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/transifex.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/transifex.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/transifex.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/transifex.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/transifex.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/transifex.yml/7.x?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate-json.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/validate-json.yml/7.x?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-json.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/mautic/mautic/validate-json.yml/7.x?enable=pin","Warn: containerImage not pinned by hash: .gitpod.Dockerfile:1: pin your Docker image by updating gitpod/workspace-full to gitpod/workspace-full@sha256:b1195dfae7ee9a12a89d195247c3e1357cc6a18360a41473dbec67525ef434e2","Warn: npmCommand not pinned by hash: .github/workflows/build-grapesjs-assets.yml:32","Warn: downloadThenRun not pinned by hash: .github/workflows/generate-release-notes.yml:26","Warn: downloadThenRun not pinned by hash: .github/workflows/tests.yml:266","Warn: downloadThenRun not pinned by hash: .github/workflows/tests.yml:267","Info:   0 out of  37 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  21 third-party GitHubAction dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned","Info:   1 out of   2 npmCommand dependencies pinned","Info:   0 out of   3 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"13 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c","Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99","Warn: Project is vulnerable to: GHSA-2j2x-2gpw-g8fm","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-237r-r8m4-4q88","Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-589f-c66p-hxr4","Warn: Project is vulnerable to: GHSA-pfq8-rq6v-vf5m","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-21T07:13:17.154Z","repository_id":37397296,"created_at":"2025-08-21T07:13:17.154Z","updated_at":"2025-08-21T07:13:17.154Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37008561,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-31T02:00:07.497Z","response_time":119,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"mautic","name":"Mautic","uuid":"5257677","kind":"organization","description":"Free and Open Source Marketing Automation","email":"info@mautic.org","website":"https://www.mautic.org","location":"Boston, MA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/5257677?v=4","repositories_count":100,"last_synced_at":"2024-10-29T18:25:02.816Z","metadata":{"has_sponsors_listing":true},"html_url":"https://github.com/mautic","funding_links":["https://github.com/sponsors/mautic"],"total_stars":8438,"followers":210,"following":0,"created_at":"2022-11-03T07:26:47.309Z","updated_at":"2024-10-29T18:25:02.816Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mautic","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mautic/repositories"},"tags":[{"name":"7.2.0-rc2","sha":"69266102a01f7920982385beb9e7dcad5df96746","kind":"commit","published_at":"2026-07-28T13:29:43.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/7.2.0-rc2","html_url":"https://github.com/mautic/mautic/releases/tag/7.2.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@7.2.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.2.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.2.0-rc2/manifests"},{"name":"7.1.3","sha":"27a76aff64aed8e50f6dd784ea86ec95d45d4616","kind":"commit","published_at":"2026-07-07T14:32:02.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/7.1.3","html_url":"https://github.com/mautic/mautic/releases/tag/7.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@7.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.1.3/manifests"},{"name":"7.2.0-rc","sha":"3253bb48e46c08928fe0b18b847a35119961f8d9","kind":"commit","published_at":"2026-06-02T16:13:38.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/7.2.0-rc","html_url":"https://github.com/mautic/mautic/releases/tag/7.2.0-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@7.2.0-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.2.0-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.2.0-rc/manifests"},{"name":"7.1.2","sha":"789364ee4aaf8aef5e6d91642336c1f446d5521b","kind":"commit","published_at":"2026-05-28T15:23:41.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/7.1.2","html_url":"https://github.com/mautic/mautic/releases/tag/7.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@7.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.1.2/manifests"},{"name":"6.0.9","sha":"bd92ad789274317c82f6e1e1179d56f7406bc702","kind":"commit","published_at":"2026-05-28T13:59:27.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/6.0.9","html_url":"https://github.com/mautic/mautic/releases/tag/6.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@6.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.9/manifests"},{"name":"5.2.11","sha":"03865b3dfbe0064df47d176b897bbfe1ba60e1d3","kind":"commit","published_at":"2026-05-28T13:58:11.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.2.11","html_url":"https://github.com/mautic/mautic/releases/tag/5.2.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.2.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.11/manifests"},{"name":"7.1.1","sha":"8299627bf3d84acc64078dc842e36dcfc5cd4d79","kind":"commit","published_at":"2026-05-04T11:06:03.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/7.1.1","html_url":"https://github.com/mautic/mautic/releases/tag/7.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@7.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.1.1/manifests"},{"name":"7.1.0","sha":"47d21705c60d53135509450b539388c4f997f4a6","kind":"commit","published_at":"2026-04-14T06:59:01.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/7.1.0","html_url":"https://github.com/mautic/mautic/releases/tag/7.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@7.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.1.0/manifests"},{"name":"7.0.2","sha":"891ba43f361116a9cb32f055922593bcb13ea163","kind":"commit","published_at":"2026-04-06T14:38:41.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/7.0.2","html_url":"https://github.com/mautic/mautic/releases/tag/7.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@7.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.0.2/manifests"},{"name":"7.1.0-rc","sha":"fdd8482329f978146f29e59a79364307f802d48a","kind":"commit","published_at":"2026-03-06T14:22:25.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/7.1.0-rc","html_url":"https://github.com/mautic/mautic/releases/tag/7.1.0-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@7.1.0-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.1.0-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.1.0-rc/manifests"},{"name":"7.0.1","sha":"f6f1a670deccff533796378b889298705494d421","kind":"commit","published_at":"2026-02-24T13:58:31.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/7.0.1","html_url":"https://github.com/mautic/mautic/releases/tag/7.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@7.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.0.1/manifests"},{"name":"6.0.8","sha":"fc6a8054b7e10d0be3665eb5ae4909980c3a207d","kind":"commit","published_at":"2026-02-24T13:53:20.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/6.0.8","html_url":"https://github.com/mautic/mautic/releases/tag/6.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@6.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.8/manifests"},{"name":"5.2.10","sha":"4c29f1e00d821fe120b96d1727b96abaaf2ff8c0","kind":"commit","published_at":"2026-02-24T13:13:30.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.2.10","html_url":"https://github.com/mautic/mautic/releases/tag/5.2.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.2.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.10/manifests"},{"name":"7.0.0","sha":"21ab270a3516635551d7464fc604f4e5e1ae3aea","kind":"commit","published_at":"2026-01-20T12:12:57.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/7.0.0","html_url":"https://github.com/mautic/mautic/releases/tag/7.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@7.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.0.0/manifests"},{"name":"7.0.0-rc2","sha":"b63e1ad96eb2393649e1b4858ec516257b31a8b9","kind":"commit","published_at":"2025-12-10T11:58:13.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/7.0.0-rc2","html_url":"https://github.com/mautic/mautic/releases/tag/7.0.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@7.0.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.0.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.0.0-rc2/manifests"},{"name":"6.0.7","sha":"32484c8104d01587f7624f6ebd6bc301fd8d0381","kind":"commit","published_at":"2025-12-01T15:10:24.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/6.0.7","html_url":"https://github.com/mautic/mautic/releases/tag/6.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@6.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.7/manifests"},{"name":"5.2.9","sha":"2bd7e3308ce7d576012de51e4404426721d4323d","kind":"commit","published_at":"2025-12-01T15:10:10.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.2.9","html_url":"https://github.com/mautic/mautic/releases/tag/5.2.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.2.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.9/manifests"},{"name":"7.0.0-rc","sha":"838867c9fd016ac464bd5fa6174a579904c14113","kind":"commit","published_at":"2025-11-11T15:04:30.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/7.0.0-rc","html_url":"https://github.com/mautic/mautic/releases/tag/7.0.0-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@7.0.0-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.0.0-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.0.0-rc/manifests"},{"name":"7.0.0-beta","sha":"1cbf3b4198ca004950b06bd091c1f35e8e4b95c7","kind":"commit","published_at":"2025-10-20T12:28:14.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/7.0.0-beta","html_url":"https://github.com/mautic/mautic/releases/tag/7.0.0-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@7.0.0-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.0.0-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.0.0-beta/manifests"},{"name":"6.0.6","sha":"2337e38f000d4731afce2206ad0c17bff5f66047","kind":"commit","published_at":"2025-09-29T11:09:59.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/6.0.6","html_url":"https://github.com/mautic/mautic/releases/tag/6.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@6.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.6/manifests"},{"name":"6.0.5","sha":"d03b55e2d025dfb624e6756c63fba242ea025a65","kind":"commit","published_at":"2025-09-02T20:08:59.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/6.0.5","html_url":"https://github.com/mautic/mautic/releases/tag/6.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@6.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.5/manifests"},{"name":"5.2.8","sha":"2053634270f5d76ae779d3598a33b2fc1d53672c","kind":"commit","published_at":"2025-09-02T11:41:13.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.2.8","html_url":"https://github.com/mautic/mautic/releases/tag/5.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.8/manifests"},{"name":"6.0.4","sha":"05643eb2ed3ae5ebc252e244e33ccdc3b8557b72","kind":"commit","published_at":"2025-08-06T13:59:58.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/6.0.4","html_url":"https://github.com/mautic/mautic/releases/tag/6.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@6.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.4/manifests"},{"name":"7.0.0-alpha","sha":"c137816e1570f2a2ee5d243dabcfda70ba1bab3d","kind":"commit","published_at":"2025-08-04T13:19:18.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/7.0.0-alpha","html_url":"https://github.com/mautic/mautic/releases/tag/7.0.0-alpha","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@7.0.0-alpha","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.0.0-alpha","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/7.0.0-alpha/manifests"},{"name":"6.0.3","sha":"7e0ac083de543b29264880be15f19b7f48550457","kind":"commit","published_at":"2025-06-30T20:03:11.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/6.0.3","html_url":"https://github.com/mautic/mautic/releases/tag/6.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@6.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.3/manifests"},{"name":"5.2.7","sha":"511dc75ecc7f5a60bd2caeee251b8f1c4f366ecd","kind":"commit","published_at":"2025-06-30T10:35:28.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.2.7","html_url":"https://github.com/mautic/mautic/releases/tag/5.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.7/manifests"},{"name":"6.0.2","sha":"2d36a94d11b91a3c056a607a716b1404b6ce5f69","kind":"commit","published_at":"2025-05-28T15:42:51.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/6.0.2","html_url":"https://github.com/mautic/mautic/releases/tag/6.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@6.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.2/manifests"},{"name":"5.2.6","sha":"3e00c36f264769446013b59944a52db2917b9388","kind":"tag","published_at":"2025-05-27T15:01:00.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.2.6","html_url":"https://github.com/mautic/mautic/releases/tag/5.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.6/manifests"},{"name":"6.0.1","sha":"c67717d978ab83858b971f17939a2b81f7efb47d","kind":"tag","published_at":"2025-05-06T11:14:49.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/6.0.1","html_url":"https://github.com/mautic/mautic/releases/tag/6.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@6.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.1/manifests"},{"name":"5.2.5","sha":"4712139a4fd576bb61f4c8c4ab554595ad980638","kind":"commit","published_at":"2025-04-28T12:48:00.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.2.5","html_url":"https://github.com/mautic/mautic/releases/tag/5.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.5/manifests"},{"name":"6.0.0","sha":"12f062e87dd1c470893724b12be7b623ecd22f2b","kind":"commit","published_at":"2025-03-25T15:01:43.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/6.0.0","html_url":"https://github.com/mautic/mautic/releases/tag/6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@6.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.0/manifests"},{"name":"5.2.4","sha":"33e691e9f56513169a6b5645ba33b002f12c5fb7","kind":"commit","published_at":"2025-03-24T15:20:03.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.2.4","html_url":"https://github.com/mautic/mautic/releases/tag/5.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.4/manifests"},{"name":"6.0.0-rc","sha":"2d15c4c544c4fbe38d6e5da67b16cdf45c2f8341","kind":"commit","published_at":"2025-03-17T15:02:09.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/6.0.0-rc","html_url":"https://github.com/mautic/mautic/releases/tag/6.0.0-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@6.0.0-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.0-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.0-rc/manifests"},{"name":"6.0.0-beta2","sha":"cbc230bcab46815b4ac934d942da11241088d3d4","kind":"commit","published_at":"2025-03-06T16:02:16.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/6.0.0-beta2","html_url":"https://github.com/mautic/mautic/releases/tag/6.0.0-beta2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@6.0.0-beta2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.0-beta2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.0-beta2/manifests"},{"name":"5.2.3","sha":"72d2ea91f6c648decbd102c262e741f86a82043e","kind":"tag","published_at":"2025-02-25T11:12:43.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.2.3","html_url":"https://github.com/mautic/mautic/releases/tag/5.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.3/manifests"},{"name":"5.2.2","sha":"a8261764f06df87c405d9f503c880306c3498490","kind":"commit","published_at":"2025-01-28T10:55:21.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.2.2","html_url":"https://github.com/mautic/mautic/releases/tag/5.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.2/manifests"},{"name":"6.0.0-alpha","sha":"0850c08e34787ba87dae0369cc33a0090027806f","kind":"commit","published_at":"2025-01-27T16:41:16.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/6.0.0-alpha","html_url":"https://github.com/mautic/mautic/releases/tag/6.0.0-alpha","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@6.0.0-alpha","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.0-alpha","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/6.0.0-alpha/manifests"},{"name":"5.2.1","sha":"e781b4dfc83b1c31df419f59e4dd0abe47ec25c7","kind":"commit","published_at":"2024-12-17T16:57:33.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.2.1","html_url":"https://github.com/mautic/mautic/releases/tag/5.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.1/manifests"},{"name":"5.2.0","sha":"45e32dfaffcf03bf2d99500be19232d21dc0fb06","kind":"commit","published_at":"2024-12-02T14:22:59.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.2.0","html_url":"https://github.com/mautic/mautic/releases/tag/5.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.2.0/manifests"},{"name":"5.1.1","sha":"8fa5a716b3082edb6bf3f2c10ab8025729d95a9c","kind":"commit","published_at":"2024-09-18T15:16:58.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.1.1","html_url":"https://github.com/mautic/mautic/releases/tag/5.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.1.1/manifests"},{"name":"4.4.13","sha":"181701cd7ca43122c151e8a46700b223379fa8d1","kind":"commit","published_at":"2024-09-18T14:19:46.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.4.13","html_url":"https://github.com/mautic/mautic/releases/tag/4.4.13","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.4.13","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.13/manifests"},{"name":"5.1.0","sha":"b30170e7711ebebcce4297699bbe107a2d29473f","kind":"tag","published_at":"2024-06-12T14:59:25.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.1.0","html_url":"https://github.com/mautic/mautic/releases/tag/5.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.1.0/manifests"},{"name":"5.0.4","sha":"4676457f5ac7c9d13308b119a28bbe527cb542ce","kind":"commit","published_at":"2024-04-11T13:24:42.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.0.4","html_url":"https://github.com/mautic/mautic/releases/tag/5.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.4/manifests"},{"name":"4.4.12","sha":"d1a8dcdf235f5b50bd1e05146a704e0c250c25da","kind":"commit","published_at":"2024-04-11T12:32:02.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.4.12","html_url":"https://github.com/mautic/mautic/releases/tag/4.4.12","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.4.12","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.12/manifests"},{"name":"5.0.3","sha":"7e482b7638b506aae88d057e8cfb94e654b7d90d","kind":"tag","published_at":"2024-02-05T20:57:21.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.0.3","html_url":"https://github.com/mautic/mautic/releases/tag/5.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.3/manifests"},{"name":"4.4.11","sha":"16e1a2738228d14618f82ac2c17ee50aa1c20c90","kind":"tag","published_at":"2024-01-18T20:09:14.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.4.11","html_url":"https://github.com/mautic/mautic/releases/tag/4.4.11","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.4.11","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.11/manifests"},{"name":"5.0.2","sha":"7206e4414194abf8b1cfa48fb671f7e75df31121","kind":"tag","published_at":"2024-01-16T20:11:09.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.0.2","html_url":"https://github.com/mautic/mautic/releases/tag/5.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.2/manifests"},{"name":"5.0.1","sha":"c3be3bbf062d1a46c45ca26409794a108770843d","kind":"commit","published_at":"2024-01-10T11:57:29.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.0.1","html_url":"https://github.com/mautic/mautic/releases/tag/5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.1/manifests"},{"name":"5.0.0","sha":"96b53794017cde917e1e4262ebaaae5099e3586a","kind":"commit","published_at":"2024-01-09T11:54:32.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.0.0","html_url":"https://github.com/mautic/mautic/releases/tag/5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.0/manifests"},{"name":"5.0.0-rc2","sha":"1756abd359f914cae2eaccd7cfe209a9665a9ee4","kind":"commit","published_at":"2023-12-19T15:01:55.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.0.0-rc2","html_url":"https://github.com/mautic/mautic/releases/tag/5.0.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.0.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.0-rc2/manifests"},{"name":"5.0.0-rc1","sha":"3d555b0b6cb708952a139f362840a798fd64d4f2","kind":"tag","published_at":"2023-11-15T15:51:18.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.0.0-rc1","html_url":"https://github.com/mautic/mautic/releases/tag/5.0.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.0.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.0-rc1/manifests"},{"name":"5.0.0-beta2","sha":"6fb041499d0ec6fb408fd12c28da887260b531f7","kind":"tag","published_at":"2023-10-18T13:43:18.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.0.0-beta2","html_url":"https://github.com/mautic/mautic/releases/tag/5.0.0-beta2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.0.0-beta2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.0-beta2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.0-beta2/manifests"},{"name":"5.0.0-beta1","sha":"88a27b72b23f6ecf220b91f42afc3245680199d9","kind":"tag","published_at":"2023-10-13T13:44:09.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.0.0-beta1","html_url":"https://github.com/mautic/mautic/releases/tag/5.0.0-beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.0.0-beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.0-beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.0-beta1/manifests"},{"name":"4.4.10","sha":"34a7de004a86cdc169d9aa36e3b41040ad95c99b","kind":"tag","published_at":"2023-09-05T10:19:59.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.4.10","html_url":"https://github.com/mautic/mautic/releases/tag/4.4.10","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.4.10","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.10/manifests"},{"name":"5.0.0-alpha1","sha":"48896fc29bc5a6cb06bc053614993b23006a2f30","kind":"commit","published_at":"2023-06-26T09:27:16.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.0.0-alpha1","html_url":"https://github.com/mautic/mautic/releases/tag/5.0.0-alpha1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.0.0-alpha1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.0-alpha1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.0-alpha1/manifests"},{"name":"5.0.0-alpha","sha":"2676f425cdd2f1932c550346e902d1d79057601e","kind":"commit","published_at":"2023-06-23T15:48:13.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/5.0.0-alpha","html_url":"https://github.com/mautic/mautic/releases/tag/5.0.0-alpha","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@5.0.0-alpha","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.0-alpha","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/5.0.0-alpha/manifests"},{"name":"4.4.9","sha":"aa4f8b678bc13edf0b9f1f51cf7d642b6fbaf347","kind":"commit","published_at":"2023-05-31T07:01:19.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.4.9","html_url":"https://github.com/mautic/mautic/releases/tag/4.4.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.4.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.9/manifests"},{"name":"4.4.8","sha":"d4f1d2bc0e26d11365189c93baf42d5da6cc1713","kind":"commit","published_at":"2023-04-28T14:31:07.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.4.8","html_url":"https://github.com/mautic/mautic/releases/tag/4.4.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.4.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.8/manifests"},{"name":"4.4.7","sha":"4a897bf90b29e7461680788251e30f416a2c56b0","kind":"commit","published_at":"2023-03-09T16:56:24.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.4.7","html_url":"https://github.com/mautic/mautic/releases/tag/4.4.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.4.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.7/manifests"},{"name":"4.4.6","sha":"73ac2950ed2f822dbdf3da22d6b7c4e6733f3235","kind":"commit","published_at":"2023-01-31T14:21:09.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.4.6","html_url":"https://github.com/mautic/mautic/releases/tag/4.4.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.4.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.6/manifests"},{"name":"4.4.5","sha":"7368d5e2dcd4a64225a53e84b71a41dd4632652f","kind":"commit","published_at":"2022-11-30T16:01:44.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.4.5","html_url":"https://github.com/mautic/mautic/releases/tag/4.4.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.4.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.5/manifests"},{"name":"4.4.4","sha":"20c8e6e00d5bc1c79c5cdab050d1665d6d2da626","kind":"commit","published_at":"2022-10-25T13:01:46.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.4.4","html_url":"https://github.com/mautic/mautic/releases/tag/4.4.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.4.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.4/manifests"},{"name":"4.4.3","sha":"d17ff5c7746566abe28317a90c6fcf7dd0cec50d","kind":"commit","published_at":"2022-09-27T12:58:24.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.4.3","html_url":"https://github.com/mautic/mautic/releases/tag/4.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.4.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.3/manifests"},{"name":"4.4.2","sha":"ba7541f73c18bb6949fed21cc4282cc883be2bf2","kind":"commit","published_at":"2022-09-05T12:52:50.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.4.2","html_url":"https://github.com/mautic/mautic/releases/tag/4.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.2/manifests"},{"name":"4.4.1","sha":"07276e0d45be0a2e538ab840605351ed2f6cc608","kind":"commit","published_at":"2022-08-01T11:59:39.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.4.1","html_url":"https://github.com/mautic/mautic/releases/tag/4.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.1/manifests"},{"name":"4.4.0","sha":"4a020f98d0d36f5d9ddd097867cdb344a1f314da","kind":"commit","published_at":"2022-06-27T12:38:17.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.4.0","html_url":"https://github.com/mautic/mautic/releases/tag/4.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.0/manifests"},{"name":"4.4.0-beta","sha":"cd524eba15e80ac782ab7938abc563f34e5ff2ef","kind":"commit","published_at":"2022-06-20T13:14:06.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.4.0-beta","html_url":"https://github.com/mautic/mautic/releases/tag/4.4.0-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.4.0-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.0-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.4.0-beta/manifests"},{"name":"4.3.1","sha":"b836ed0f7342cbe21295e0efd51f13b978aedd14","kind":"commit","published_at":"2022-05-23T12:41:26.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.3.1","html_url":"https://github.com/mautic/mautic/releases/tag/4.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.3.1/manifests"},{"name":"4.3.0","sha":"2d02775363ddd2f32b09f11144eff42796759c37","kind":"commit","published_at":"2022-05-23T12:08:28.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.3.0","html_url":"https://github.com/mautic/mautic/releases/tag/4.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.3.0/manifests"},{"name":"4.3.0-rc","sha":"b9374d04ff4f172189e0da81f146d72ac4b2d7b8","kind":"commit","published_at":"2022-05-19T14:14:58.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.3.0-rc","html_url":"https://github.com/mautic/mautic/releases/tag/4.3.0-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.3.0-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.3.0-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.3.0-rc/manifests"},{"name":"4.3.0-beta","sha":"7016da3768b4bceb7a670072689bf730368617ec","kind":"commit","published_at":"2022-05-17T11:23:59.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.3.0-beta","html_url":"https://github.com/mautic/mautic/releases/tag/4.3.0-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.3.0-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.3.0-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.3.0-beta/manifests"},{"name":"4.2.2","sha":"445fde84edd257683528626f425f8085e3b4089d","kind":"commit","published_at":"2022-04-26T09:41:53.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.2.2","html_url":"https://github.com/mautic/mautic/releases/tag/4.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.2.2/manifests"},{"name":"4.2.1","sha":"05020707c20414980ac849fb073201f42a8a7254","kind":"commit","published_at":"2022-03-29T13:03:26.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.2.1","html_url":"https://github.com/mautic/mautic/releases/tag/4.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.2.1/manifests"},{"name":"4.2.0","sha":"cd19c594208c327b995ac7050f95720d830c3ddd","kind":"commit","published_at":"2022-02-28T22:37:04.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.2.0","html_url":"https://github.com/mautic/mautic/releases/tag/4.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.2.0/manifests"},{"name":"3.3.5","sha":"6b64469b6e1048aee3acb05479bc53c32346933c","kind":"commit","published_at":"2022-02-28T21:08:59.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.3.5","html_url":"https://github.com/mautic/mautic/releases/tag/3.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.5/manifests"},{"name":"4.2.0-rc1","sha":"6eba0e205acf421c508b7791f8a4e27c8951cb1c","kind":"commit","published_at":"2022-02-17T14:42:01.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.2.0-rc1","html_url":"https://github.com/mautic/mautic/releases/tag/4.2.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.2.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.2.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.2.0-rc1/manifests"},{"name":"4.2.0-rc","sha":"c66252a2662d83a5aabafd183fe7e088acffd860","kind":"commit","published_at":"2022-02-17T13:24:41.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.2.0-rc","html_url":"https://github.com/mautic/mautic/releases/tag/4.2.0-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.2.0-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.2.0-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.2.0-rc/manifests"},{"name":"4.1.2","sha":"074d05c4da0d028269576f7125330d68d6dc6f7a","kind":"commit","published_at":"2022-01-25T12:15:55.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.1.2","html_url":"https://github.com/mautic/mautic/releases/tag/4.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.1.2/manifests"},{"name":"4.1.1","sha":"9414f39aa0718cdb111b7d6e5be814f31c88df52","kind":"commit","published_at":"2021-12-20T16:33:13.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.1.1","html_url":"https://github.com/mautic/mautic/releases/tag/4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.1.1/manifests"},{"name":"4.1.0","sha":"5975231722cfde8bdad783b373c70ad20333db37","kind":"commit","published_at":"2021-11-29T20:50:45.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.1.0","html_url":"https://github.com/mautic/mautic/releases/tag/4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.1.0/manifests"},{"name":"4.0.2","sha":"99450ca7a9f66f30b130c16fff0b0547538c403e","kind":"commit","published_at":"2021-11-15T17:09:23.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.0.2","html_url":"https://github.com/mautic/mautic/releases/tag/4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.0.2/manifests"},{"name":"4.0.1","sha":"9f37fb229dff54478159cd29037423db0671ca9b","kind":"tag","published_at":"2021-09-27T19:32:45.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.0.1","html_url":"https://github.com/mautic/mautic/releases/tag/4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.0.1/manifests"},{"name":"3.3.4","sha":"2f4cf5264a1281d029f002858b41b4efb80d8e83","kind":"commit","published_at":"2021-08-30T13:44:04.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.3.4","html_url":"https://github.com/mautic/mautic/releases/tag/3.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.4/manifests"},{"name":"4.0.0","sha":"0abd6b79738f7cf096b435d8f87ea998617e17c1","kind":"commit","published_at":"2021-08-30T13:12:34.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.0.0","html_url":"https://github.com/mautic/mautic/releases/tag/4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.0.0/manifests"},{"name":"4.0.0-rc","sha":"5431e0384d181972b22b532e33d30c7089f2ae63","kind":"commit","published_at":"2021-07-05T08:34:56.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.0.0-rc","html_url":"https://github.com/mautic/mautic/releases/tag/4.0.0-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.0.0-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.0.0-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.0.0-rc/manifests"},{"name":"4.0.0-beta","sha":"4f3aa700a5c1220c9fb99f54bef596ecc568271c","kind":"commit","published_at":"2021-05-25T16:47:40.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.0.0-beta","html_url":"https://github.com/mautic/mautic/releases/tag/4.0.0-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.0.0-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.0.0-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.0.0-beta/manifests"},{"name":"3.3.3","sha":"a16eb83f6cff0d3c5ea39bc172a5eb262ce2616b","kind":"commit","published_at":"2021-04-26T15:49:09.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.3.3","html_url":"https://github.com/mautic/mautic/releases/tag/3.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.3/manifests"},{"name":"3.3.3-rc","sha":"2a4cf886be4b8a849c0402699d54ee0ee3ec9f02","kind":"commit","published_at":"2021-04-19T17:13:30.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.3.3-rc","html_url":"https://github.com/mautic/mautic/releases/tag/3.3.3-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.3.3-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.3-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.3-rc/manifests"},{"name":"4.0.0-alpha1","sha":"823a23c4c0148841f7f23c33c56167cfb59d0c99","kind":"commit","published_at":"2021-03-30T20:04:44.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/4.0.0-alpha1","html_url":"https://github.com/mautic/mautic/releases/tag/4.0.0-alpha1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@4.0.0-alpha1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.0.0-alpha1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/4.0.0-alpha1/manifests"},{"name":"3.3.2","sha":"fc21750bec113a95e9f5e227200efc95819fc723","kind":"commit","published_at":"2021-03-22T19:50:45.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.3.2","html_url":"https://github.com/mautic/mautic/releases/tag/3.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.2/manifests"},{"name":"3.3.2-rc","sha":"8a85744cdb0d1e6de97a060ad5a964aa0b64a555","kind":"commit","published_at":"2021-03-15T17:42:34.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.3.2-rc","html_url":"https://github.com/mautic/mautic/releases/tag/3.3.2-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.3.2-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.2-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.2-rc/manifests"},{"name":"3.3.1","sha":"eabc53ace6927e8a1befe1e7a1b37346a7240324","kind":"commit","published_at":"2021-02-23T22:50:04.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.3.1","html_url":"https://github.com/mautic/mautic/releases/tag/3.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.1/manifests"},{"name":"3.3.0","sha":"692f0d922889b296208723056056a76f4c3b87a4","kind":"commit","published_at":"2021-02-22T19:05:44.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.3.0","html_url":"https://github.com/mautic/mautic/releases/tag/3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.0/manifests"},{"name":"3.3.0-rc","sha":"c8bf3c55d845b2f07eefe9419606f48f08c35e44","kind":"commit","published_at":"2021-02-16T06:37:51.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.3.0-rc","html_url":"https://github.com/mautic/mautic/releases/tag/3.3.0-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.3.0-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.0-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.3.0-rc/manifests"},{"name":"3.2.5","sha":"1e4ec81d9e07a8a3d1f687d08e96bdd0e2a70135","kind":"commit","published_at":"2021-01-25T07:47:24.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.2.5","html_url":"https://github.com/mautic/mautic/releases/tag/3.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.5/manifests"},{"name":"3.2.5-rc","sha":"4aac7918fe5afb65150feea663da26189b358fec","kind":"commit","published_at":"2021-01-18T17:18:59.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.2.5-rc","html_url":"https://github.com/mautic/mautic/releases/tag/3.2.5-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.2.5-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.5-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.5-rc/manifests"},{"name":"3.2.4","sha":"540c62d6fdfb886b328f792cbc6d2959034d9317","kind":"commit","published_at":"2021-01-14T16:36:27.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.2.4","html_url":"https://github.com/mautic/mautic/releases/tag/3.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.4/manifests"},{"name":"2.16.5","sha":"0e05617f12dab886e0d45ec26aa43973f25a134d","kind":"commit","published_at":"2021-01-14T15:10:59.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.16.5","html_url":"https://github.com/mautic/mautic/releases/tag/2.16.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.16.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.5/manifests"},{"name":"3.2.3","sha":"737659671b7fc6762d4e80bb1fd01b677c04b8fe","kind":"commit","published_at":"2021-01-14T14:59:51.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.2.3","html_url":"https://github.com/mautic/mautic/releases/tag/3.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.3/manifests"},{"name":"3.2.2","sha":"d230d9125e07035dd2606235b8d5ba8916af3cda","kind":"commit","published_at":"2020-12-25T13:43:36.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.2.2","html_url":"https://github.com/mautic/mautic/releases/tag/3.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.2/manifests"},{"name":"3.2.2-rc","sha":"b0bc2c1bda90b861fa5ef547ef0713cb02251033","kind":"commit","published_at":"2020-12-21T11:54:36.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.2.2-rc","html_url":"https://github.com/mautic/mautic/releases/tag/3.2.2-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.2.2-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.2-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.2-rc/manifests"},{"name":"2.16.4","sha":"039289f16b4c6a4dad7c0ed4b7314e12a59789dc","kind":"commit","published_at":"2020-12-07T08:54:59.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.16.4","html_url":"https://github.com/mautic/mautic/releases/tag/2.16.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.16.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.4/manifests"},{"name":"3.2.1","sha":"c48a14be6310cc8f2f475a5f0ba78285b706a699","kind":"commit","published_at":"2020-12-02T19:03:20.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.2.1","html_url":"https://github.com/mautic/mautic/releases/tag/3.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.1/manifests"},{"name":"3.2.0","sha":"d41e81d07e680bf4747128af44e533ac6615305a","kind":"commit","published_at":"2020-11-30T11:24:09.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.2.0","html_url":"https://github.com/mautic/mautic/releases/tag/3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.0/manifests"},{"name":"3.2.0-rc","sha":"0fea369d570b15fa97a2a25f46017614845970af","kind":"commit","published_at":"2020-11-23T15:42:19.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.2.0-rc","html_url":"https://github.com/mautic/mautic/releases/tag/3.2.0-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.2.0-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.0-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.2.0-rc/manifests"},{"name":"3.1.2","sha":"2785bde530fd048a40b31fd725a40a368b9e56ec","kind":"commit","published_at":"2020-10-26T10:46:10.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.1.2","html_url":"https://github.com/mautic/mautic/releases/tag/3.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.1.2/manifests"},{"name":"3.1.2-rc","sha":"1d0c010cfa490a390ce408c776d8828969189567","kind":"commit","published_at":"2020-10-19T10:01:12.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.1.2-rc","html_url":"https://github.com/mautic/mautic/releases/tag/3.1.2-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.1.2-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.1.2-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.1.2-rc/manifests"},{"name":"3.1.1","sha":"271231a53912cc97c304113d06ad404d642eb437","kind":"commit","published_at":"2020-09-28T20:21:26.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.1.1","html_url":"https://github.com/mautic/mautic/releases/tag/3.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.1.1/manifests"},{"name":"3.1.1-rc","sha":"9aef6eefef9194f5d050c61c22ef25fcca1e0046","kind":"commit","published_at":"2020-09-21T20:58:04.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.1.1-rc","html_url":"https://github.com/mautic/mautic/releases/tag/3.1.1-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.1.1-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.1.1-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.1.1-rc/manifests"},{"name":"3.1.0","sha":"2cdc757e8744e4b11d8bb85b574c4ce9777706ff","kind":"commit","published_at":"2020-08-24T17:53:29.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.1.0","html_url":"https://github.com/mautic/mautic/releases/tag/3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.1.0/manifests"},{"name":"3.1.0-rc","sha":"48640968c068e73ae744a91f9eb779c0284cf2eb","kind":"commit","published_at":"2020-08-17T19:10:30.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.1.0-rc","html_url":"https://github.com/mautic/mautic/releases/tag/3.1.0-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.1.0-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.1.0-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.1.0-rc/manifests"},{"name":"3.0.2","sha":"473f08ba652634b59feca41c8b53d24d9d7682ed","kind":"commit","published_at":"2020-07-27T09:21:55.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.0.2","html_url":"https://github.com/mautic/mautic/releases/tag/3.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.2/manifests"},{"name":"3.0.2-rc","sha":"dc6262f1fb6c4ed9e488da1a2a65a0f2dc3c43cc","kind":"commit","published_at":"2020-07-23T10:27:47.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.0.2-rc","html_url":"https://github.com/mautic/mautic/releases/tag/3.0.2-rc","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.0.2-rc","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.2-rc","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.2-rc/manifests"},{"name":"2.16.3","sha":"50aba1b53c9821d673cfe7b4de24ad0e5bb0d17c","kind":"commit","published_at":"2020-06-29T19:21:55.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.16.3","html_url":"https://github.com/mautic/mautic/releases/tag/2.16.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.16.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.3/manifests"},{"name":"3.0.1","sha":"483d21b7060ed1ce19fdb7ddc1b4d43d1751a8d2","kind":"commit","published_at":"2020-06-29T18:04:03.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.0.1","html_url":"https://github.com/mautic/mautic/releases/tag/3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.1/manifests"},{"name":"2.16.3-beta","sha":"e356e2b413da650261922b82dd64b0feb802431b","kind":"commit","published_at":"2020-06-15T22:05:03.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.16.3-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.16.3-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.16.3-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.3-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.3-beta/manifests"},{"name":"3.0.0","sha":"8e06fc979fd4369ce79386e1cc8e7587a9655f49","kind":"commit","published_at":"2020-06-15T21:22:14.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.0.0","html_url":"https://github.com/mautic/mautic/releases/tag/3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.0/manifests"},{"name":"3.0.0-8885","sha":"7c96a5315163bc2c3f4f84e5122547f0e0ab9df3","kind":"commit","published_at":"2020-06-15T12:21:19.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.0.0-8885","html_url":"https://github.com/mautic/mautic/releases/tag/3.0.0-8885","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.0.0-8885","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.0-8885","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.0-8885/manifests"},{"name":"3.0.0-beta2fixed","sha":"559ca76ea4381a9bae75b310efa901e422bed73d","kind":"commit","published_at":"2020-06-07T14:21:11.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.0.0-beta2fixed","html_url":"https://github.com/mautic/mautic/releases/tag/3.0.0-beta2fixed","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.0.0-beta2fixed","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.0-beta2fixed","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.0-beta2fixed/manifests"},{"name":"3.0.0-beta2","sha":"871f7f3f860c4ff392d976e2d9c791f751324559","kind":"commit","published_at":"2020-05-17T01:13:53.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.0.0-beta2","html_url":"https://github.com/mautic/mautic/releases/tag/3.0.0-beta2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.0.0-beta2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.0-beta2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.0-beta2/manifests"},{"name":"2.16.2","sha":"1b72d772006a835ab8d33ebdcc676e87c6d05c59","kind":"commit","published_at":"2020-04-10T13:41:36.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.16.2","html_url":"https://github.com/mautic/mautic/releases/tag/2.16.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.16.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.2/manifests"},{"name":"2.16.2-beta","sha":"7718e1f5a1de0943e30fc8dd3b0e0f9d7c4c38d2","kind":"commit","published_at":"2020-04-07T18:58:28.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.16.2-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.16.2-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.16.2-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.2-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.2-beta/manifests"},{"name":"2.16.1","sha":"f0a17c80062aaee50d12e8f4097f7aa6a3d6c390","kind":"commit","published_at":"2020-03-25T15:11:22.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.16.1","html_url":"https://github.com/mautic/mautic/releases/tag/2.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.1/manifests"},{"name":"2.16.1-beta","sha":"32f5a44d10133da61937e4289afaaee4bd914475","kind":"commit","published_at":"2020-03-20T11:38:59.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.16.1-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.16.1-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.16.1-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.1-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.1-beta/manifests"},{"name":"3.0.0-beta","sha":"bccba480d85e3e64c9e61193d874f649ac9ebd89","kind":"commit","published_at":"2020-02-17T17:52:59.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.0.0-beta","html_url":"https://github.com/mautic/mautic/releases/tag/3.0.0-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.0.0-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.0-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.0-beta/manifests"},{"name":"2.16.0","sha":"77b116509989c7a6c9edd8a8ed5c539e519a783c","kind":"commit","published_at":"2020-02-13T15:33:46.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.16.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.0/manifests"},{"name":"2.16.0-beta","sha":"3481a3fa261d3a41abdf6e769c210522c945c01b","kind":"commit","published_at":"2020-01-30T22:51:00.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.16.0-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.16.0-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.16.0-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.0-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.16.0-beta/manifests"},{"name":"3.0.0-alpha","sha":"86eac97e5479a02cc386fe3fc8ec46cd63213f26","kind":"commit","published_at":"2020-01-11T03:11:14.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/3.0.0-alpha","html_url":"https://github.com/mautic/mautic/releases/tag/3.0.0-alpha","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@3.0.0-alpha","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.0-alpha","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/3.0.0-alpha/manifests"},{"name":"2.15.3","sha":"64b4115367cb0956fed82f7b5dc53165e2128d81","kind":"commit","published_at":"2019-10-08T16:42:42.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.15.3","html_url":"https://github.com/mautic/mautic/releases/tag/2.15.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.15.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.3/manifests"},{"name":"2.15.3-beta","sha":"f341816b1ee50ee3d67f3938b379aa8ed023798b","kind":"commit","published_at":"2019-09-27T11:46:31.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.15.3-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.15.3-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.15.3-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.3-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.3-beta/manifests"},{"name":"2.15.2","sha":"de5fc989a9f1ddc46887404748682014e0705f5b","kind":"commit","published_at":"2019-08-01T13:18:14.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.15.2","html_url":"https://github.com/mautic/mautic/releases/tag/2.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.2/manifests"},{"name":"2.15.2-beta","sha":"8641a6c5b0e8d6ec11ec26c17cf74a36fc4822f7","kind":"commit","published_at":"2019-05-30T07:41:26.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.15.2-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.15.2-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.15.2-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.2-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.2-beta/manifests"},{"name":"2.15.1","sha":"8abdcc73ce091f6a1deced817a9a4a7a2999967c","kind":"commit","published_at":"2019-03-25T23:05:16.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.15.1","html_url":"https://github.com/mautic/mautic/releases/tag/2.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.1/manifests"},{"name":"2.15.1-beta","sha":"9c787b197e4403aaa2cae7f5830c3642878dea03","kind":"commit","published_at":"2019-03-12T19:58:14.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.15.1-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.15.1-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.15.1-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.1-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.1-beta/manifests"},{"name":"2.15.0","sha":"6d201acec18815ba274130e9ad8d34d1ae3bf5ce","kind":"commit","published_at":"2018-12-19T12:24:49.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.15.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.0/manifests"},{"name":"2.15.0-beta","sha":"87877de3dd6fdcfdf9e5a82a30c819da34d9c855","kind":"commit","published_at":"2018-12-05T16:20:08.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.15.0-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.15.0-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.15.0-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.0-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.15.0-beta/manifests"},{"name":"2.14.2","sha":"816990f2fef5887c9f3edafc87b7a9cc458000ec","kind":"commit","published_at":"2018-10-23T18:43:32.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.14.2","html_url":"https://github.com/mautic/mautic/releases/tag/2.14.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.14.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.14.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.14.2/manifests"},{"name":"2.14.2-beta","sha":"bce75e8b2bb7bebcc525817ec32ce254c9cae88c","kind":"commit","published_at":"2018-10-16T20:56:22.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.14.2-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.14.2-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.14.2-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.14.2-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.14.2-beta/manifests"},{"name":"2.14.1","sha":"ef2bb879baf6de9dbc3930f51b164dc14bdefa3d","kind":"commit","published_at":"2018-09-20T19:23:20.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.14.1","html_url":"https://github.com/mautic/mautic/releases/tag/2.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.14.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.14.1/manifests"},{"name":"2.14.1-beta","sha":"9e651c1e32d8a4827b6da83f6b884dd37172e6ec","kind":"commit","published_at":"2018-09-06T16:27:18.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.14.1-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.14.1-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.14.1-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.14.1-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.14.1-beta/manifests"},{"name":"2.14.0","sha":"25dcf05333bb7ca91d0f862111e6a8e5a4f724c2","kind":"commit","published_at":"2018-07-25T17:17:41.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.14.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.14.0/manifests"},{"name":"2.14.0-beta","sha":"f310e8bb10d7f048ccd606dd6f7d8f9e19e2fec0","kind":"commit","published_at":"2018-07-17T16:40:19.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.14.0-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.14.0-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.14.0-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.14.0-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.14.0-beta/manifests"},{"name":"2.13.1","sha":"22b6ee824b3d4a667f4fb71223e03048d82d9bca","kind":"commit","published_at":"2018-04-24T21:09:31.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.13.1","html_url":"https://github.com/mautic/mautic/releases/tag/2.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.13.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.13.1/manifests"},{"name":"2.13.0","sha":"5416ecb1fa7cd28d7a90fedd435227466dd1d27d","kind":"commit","published_at":"2018-04-17T16:30:03.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.13.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.13.0/manifests"},{"name":"2.13.0-beta","sha":"4db54562eb41d8ad4a4e2e4dfc2ddbac86fd498c","kind":"commit","published_at":"2018-04-09T20:01:20.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.13.0-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.13.0-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.13.0-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.13.0-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.13.0-beta/manifests"},{"name":"2.12.2","sha":"eec5676cc242b32142b6efcf0c44edc8b16fdd63","kind":"commit","published_at":"2018-02-27T09:41:33.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.12.2","html_url":"https://github.com/mautic/mautic/releases/tag/2.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.12.2/manifests"},{"name":"2.12.2-beta","sha":"9d374ecaf6c4be611da099bc660db5445e1210de","kind":"commit","published_at":"2018-01-25T23:19:44.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.12.2-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.12.2-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.12.2-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.12.2-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.12.2-beta/manifests"},{"name":"2.12.1","sha":"e06b45ce4d3ceaceb9a963f8e2297918850ee490","kind":"commit","published_at":"2018-01-04T19:49:11.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.12.1","html_url":"https://github.com/mautic/mautic/releases/tag/2.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.12.1/manifests"},{"name":"2.12.1-beta","sha":"05804d125c0191d57a8f0507bed86ec6daf0c072","kind":"commit","published_at":"2017-12-28T03:39:41.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.12.1-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.12.1-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.12.1-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.12.1-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.12.1-beta/manifests"},{"name":"2.12.0","sha":"4f160841ac32ca5961d892daba75ae19953525dc","kind":"commit","published_at":"2017-12-07T15:27:01.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.12.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.12.0/manifests"},{"name":"2.12.0-beta","sha":"b86924d1bb9a1f806b6561674b7ee2fc0ae80035","kind":"commit","published_at":"2017-12-05T04:11:33.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.12.0-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.12.0-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.12.0-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.12.0-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.12.0-beta/manifests"},{"name":"2.11.0","sha":"ba4c58a5d12119f6c23cf28b60da0965d20a7513","kind":"commit","published_at":"2017-10-26T18:27:41.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.11.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.11.0/manifests"},{"name":"2.11.0-beta","sha":"d0779771677645e56799c62b9612371244e553a2","kind":"commit","published_at":"2017-10-19T18:45:48.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.11.0-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.11.0-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.11.0-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.11.0-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.11.0-beta/manifests"},{"name":"2.9.2-ines.beta.2","sha":"6292d8bde7e24673b179ac1f81359ffbb0f81cb3","kind":"commit","published_at":"2017-09-26T07:30:40.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.9.2-ines.beta.2","html_url":"https://github.com/mautic/mautic/releases/tag/2.9.2-ines.beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.9.2-ines.beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.9.2-ines.beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.9.2-ines.beta.2/manifests"},{"name":"2.9.2-ines.beta.1","sha":"65c25f4e992cce1338cce98a388119911996417d","kind":"commit","published_at":"2017-09-22T09:14:12.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.9.2-ines.beta.1","html_url":"https://github.com/mautic/mautic/releases/tag/2.9.2-ines.beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.9.2-ines.beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.9.2-ines.beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.9.2-ines.beta.1/manifests"},{"name":"2.10.1","sha":"50c4adadf9fe56d34bb8884ee2215d2ad7e8692a","kind":"commit","published_at":"2017-09-18T13:44:05.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.10.1","html_url":"https://github.com/mautic/mautic/releases/tag/2.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.10.1/manifests"},{"name":"2.10.0","sha":"6c7d52e0a4e3491ab9ad7f8b484e3dc4b19ece4a","kind":"commit","published_at":"2017-09-06T16:27:33.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.10.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.10.0/manifests"},{"name":"2.10.0-beta","sha":"e9bc0ada5bd51acb977d0f60e0b4e4073acc6dc4","kind":"commit","published_at":"2017-08-30T15:02:16.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.10.0-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.10.0-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.10.0-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.10.0-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.10.0-beta/manifests"},{"name":"2.9.2","sha":"5c2f3c22b008666aed443dffc2268649ee7ea19e","kind":"commit","published_at":"2017-08-04T03:46:53.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.9.2","html_url":"https://github.com/mautic/mautic/releases/tag/2.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.9.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.9.2/manifests"},{"name":"2.9.1","sha":"64527a76a0c48f54c543a919fdec00a743eee002","kind":"commit","published_at":"2017-07-27T18:22:34.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.9.1","html_url":"https://github.com/mautic/mautic/releases/tag/2.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.9.1/manifests"},{"name":"2.9.0","sha":"0d8cb6272ca2d662f295567cafd9d7ff88ebedff","kind":"commit","published_at":"2017-07-13T20:00:29.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.9.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.9.0/manifests"},{"name":"2.9.0-beta","sha":"c40a4564db86d057606f1b3d4325823933f1eecb","kind":"commit","published_at":"2017-07-05T18:08:48.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.9.0-beta","html_url":"https://github.com/mautic/mautic/releases/tag/2.9.0-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.9.0-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.9.0-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.9.0-beta/manifests"},{"name":"2.8.2","sha":"3a74446999140733c1a1210c39284d1f25a46a81","kind":"commit","published_at":"2017-06-01T20:02:28.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.8.2","html_url":"https://github.com/mautic/mautic/releases/tag/2.8.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.8.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.8.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.8.2/manifests"},{"name":"2.8.1","sha":"d6c7ddb1f9456d54753cb1dbb9de8eb9103609e1","kind":"commit","published_at":"2017-05-16T17:09:15.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.8.1","html_url":"https://github.com/mautic/mautic/releases/tag/2.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.8.1/manifests"},{"name":"2.8.0","sha":"f34c537b3b2a82f8c78a70d1890096ddecc27957","kind":"commit","published_at":"2017-04-25T21:48:15.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.8.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.8.0/manifests"},{"name":"2.7.1","sha":"3ed237d8d44cbd269a16e18530106ed92935a518","kind":"commit","published_at":"2017-03-13T17:27:54.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.7.1","html_url":"https://github.com/mautic/mautic/releases/tag/2.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.7.1/manifests"},{"name":"2.7.0","sha":"7330d195bdbf0886238f92f04add5eda9c04f3fa","kind":"commit","published_at":"2017-03-06T18:01:06.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.7.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.7.0/manifests"},{"name":"2.6.1","sha":"a4b9da32d287162a1311ec3efe6ba2eb83f000db","kind":"commit","published_at":"2017-02-16T19:36:13.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.6.1","html_url":"https://github.com/mautic/mautic/releases/tag/2.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.6.1/manifests"},{"name":"2.6.0","sha":"dc3d7c188e8c6f389614a18e427b99b4280baedb","kind":"commit","published_at":"2017-02-09T18:17:48.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.6.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.6.0/manifests"},{"name":"2.5.1","sha":"faf9d26cde1c1ac0b268e2673146965569dfec04","kind":"commit","published_at":"2017-01-04T21:06:31.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.5.1","html_url":"https://github.com/mautic/mautic/releases/tag/2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.5.1/manifests"},{"name":"2.5.0","sha":"dca3b03f8ab26600cb875556b1a276995680de32","kind":"commit","published_at":"2017-01-03T18:18:25.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.5.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.5.0/manifests"},{"name":"2.4.0","sha":"d8c08b0cdf13dd34b2f214b06d543023f02a4c01","kind":"commit","published_at":"2016-12-12T18:17:10.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.4.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.4.0/manifests"},{"name":"2.3.0","sha":"078224f8cf6d04c97d61e1b5bde9b186d6294b64","kind":"commit","published_at":"2016-11-30T01:02:53.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.3.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.3.0/manifests"},{"name":"2.2.1","sha":"33c2c1a7d0aba3fae35c18c146a253909b1f0d6f","kind":"commit","published_at":"2016-10-13T15:28:57.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.2.1","html_url":"https://github.com/mautic/mautic/releases/tag/2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.2.1/manifests"},{"name":"2.2.0","sha":"7b731c4043211f861ef3ba1df7bd05741704baad","kind":"commit","published_at":"2016-10-06T13:52:03.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.2.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.2.0/manifests"},{"name":"2.1.1","sha":"b9b8dfa37f33d48b8d60a8f6248a61b5f3f59573","kind":"commit","published_at":"2016-08-25T05:01:10.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.1.1","html_url":"https://github.com/mautic/mautic/releases/tag/2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.1.1/manifests"},{"name":"2.1.0","sha":"fbffb1d7eb4aa33221849f8e0f2a0075ab7c82fa","kind":"commit","published_at":"2016-08-11T19:54:22.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.1.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.1.0/manifests"},{"name":"2.0.1","sha":"102aa9fb532d74daa47bffd79389dc5f21bd73b9","kind":"commit","published_at":"2016-07-12T19:56:14.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.0.1","html_url":"https://github.com/mautic/mautic/releases/tag/2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.0.1/manifests"},{"name":"2.0.0","sha":"0eca57e56f026e197e92d6503d775638c5c9beff","kind":"commit","published_at":"2016-07-05T13:31:54.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/2.0.0","html_url":"https://github.com/mautic/mautic/releases/tag/2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/2.0.0/manifests"},{"name":"1.4.1","sha":"513c1268d3ce3345e9b6d0953a9098e77428abf5","kind":"commit","published_at":"2016-05-31T17:30:48.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.4.1","html_url":"https://github.com/mautic/mautic/releases/tag/1.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.4.1/manifests"},{"name":"1.4.0","sha":"ec713864b721b9b7ffdff64056aec473bda373ab","kind":"commit","published_at":"2016-05-11T00:37:21.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.4.0","html_url":"https://github.com/mautic/mautic/releases/tag/1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.4.0/manifests"},{"name":"1.3.1","sha":"af554dd1398ebfbe27e1244afc484d0a226de185","kind":"commit","published_at":"2016-03-19T18:52:19.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.3.1","html_url":"https://github.com/mautic/mautic/releases/tag/1.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.3.1/manifests"},{"name":"1.3.0","sha":"b90a26f17f32d99a168d9de330cd88456c9d18a8","kind":"commit","published_at":"2016-03-02T00:59:08.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.3.0","html_url":"https://github.com/mautic/mautic/releases/tag/1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.3.0/manifests"},{"name":"1.2.4","sha":"d5a7e75c55820dd1c20384691f732bbe396df9ad","kind":"commit","published_at":"2016-01-25T17:20:19.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.2.4","html_url":"https://github.com/mautic/mautic/releases/tag/1.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.2.4/manifests"},{"name":"1.2.3","sha":"25b9d121a510999bf1c823bee70328a35f51c2d2","kind":"commit","published_at":"2015-12-23T17:00:33.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.2.3","html_url":"https://github.com/mautic/mautic/releases/tag/1.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.2.3/manifests"},{"name":"1.2.2","sha":"dbcbd790742c9976a4d9e42039a7c7005f284b7a","kind":"commit","published_at":"2015-10-27T20:02:05.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.2.2","html_url":"https://github.com/mautic/mautic/releases/tag/1.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.2.2/manifests"},{"name":"1.2.1","sha":"449f1eb72c9dc0dddc04e8792051023545648420","kind":"commit","published_at":"2015-10-23T03:05:07.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.2.1","html_url":"https://github.com/mautic/mautic/releases/tag/1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.2.1/manifests"},{"name":"1.2.0","sha":"51f4ca271ed87e38b1d34f32af5f6d112917f521","kind":"commit","published_at":"2015-09-03T22:09:42.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.2.0","html_url":"https://github.com/mautic/mautic/releases/tag/1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.2.0/manifests"},{"name":"1.2.0-beta1","sha":"cd0be0462a8ce50f9f5773807b06085e1821b13c","kind":"commit","published_at":"2015-08-29T15:57:20.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.2.0-beta1","html_url":"https://github.com/mautic/mautic/releases/tag/1.2.0-beta1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.2.0-beta1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.2.0-beta1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.2.0-beta1/manifests"},{"name":"1.1.3","sha":"4c395d54d6342ad2c7e752de07e285a83a2799d8","kind":"commit","published_at":"2015-07-19T21:52:27.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.1.3","html_url":"https://github.com/mautic/mautic/releases/tag/1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.1.3/manifests"},{"name":"1.1.2","sha":"d59f75f17a9c559ee5143e38ddd6ef0a8be59002","kind":"commit","published_at":"2015-06-09T18:20:48.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.1.2","html_url":"https://github.com/mautic/mautic/releases/tag/1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.1.2/manifests"},{"name":"1.1.1","sha":"0d32a7215b375a23e8eee34b68ca293b380adfbc","kind":"commit","published_at":"2015-06-08T20:07:26.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.1.1","html_url":"https://github.com/mautic/mautic/releases/tag/1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.1.1/manifests"},{"name":"1.1.0","sha":"66ccd23bd8450dec943c1dba218ddbc399d06c00","kind":"commit","published_at":"2015-06-07T01:38:47.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.1.0","html_url":"https://github.com/mautic/mautic/releases/tag/1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.1.0/manifests"},{"name":"1.0.5","sha":"d18f4b0151ba46da8721bbf47a215bcecc9aecde","kind":"commit","published_at":"2015-05-05T17:37:13.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.0.5","html_url":"https://github.com/mautic/mautic/releases/tag/1.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.5/manifests"},{"name":"1.0.4","sha":"b4b6357c331b08e39d15b43187f8b859eeb5b40e","kind":"commit","published_at":"2015-05-04T22:13:23.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.0.4","html_url":"https://github.com/mautic/mautic/releases/tag/1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.4/manifests"},{"name":"1.0.3","sha":"ae90b4d829096bb51cbd58c8b4b1cbf2b3ec3bd4","kind":"commit","published_at":"2015-04-14T22:58:58.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.0.3","html_url":"https://github.com/mautic/mautic/releases/tag/1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.3/manifests"},{"name":"1.0.2","sha":"d5cc52c63d14c0a65c135dfad6f7615d9fb40383","kind":"commit","published_at":"2015-04-03T03:17:40.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.0.2","html_url":"https://github.com/mautic/mautic/releases/tag/1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.2/manifests"},{"name":"1.0.1","sha":"e8f705b9c1990077aa944ef2aaf5b705591bfe05","kind":"commit","published_at":"2015-03-10T21:11:42.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.0.1","html_url":"https://github.com/mautic/mautic/releases/tag/1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.1/manifests"},{"name":"1.0.0","sha":"41ced3a8454de4950c7da4c81291993737783930","kind":"commit","published_at":"2015-03-10T15:31:56.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.0.0","html_url":"https://github.com/mautic/mautic/releases/tag/1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0/manifests"},{"name":"1.0.0-rc4","sha":"7f0a26411e8a1d159c6c24061df33d20a2eca7ce","kind":"commit","published_at":"2015-03-07T18:46:48.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.0.0-rc4","html_url":"https://github.com/mautic/mautic/releases/tag/1.0.0-rc4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.0.0-rc4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-rc4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-rc4/manifests"},{"name":"1.0.0-rc3","sha":"a48995b067426cc2e1354217f591a2fb9eb3af5c","kind":"commit","published_at":"2015-03-07T08:25:10.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.0.0-rc3","html_url":"https://github.com/mautic/mautic/releases/tag/1.0.0-rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.0.0-rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-rc3/manifests"},{"name":"1.0.0-rc2","sha":"232c4ab7f9d10530196a78c9d728f4857afcac18","kind":"commit","published_at":"2015-02-27T21:33:01.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.0.0-rc2","html_url":"https://github.com/mautic/mautic/releases/tag/1.0.0-rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.0.0-rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-rc2/manifests"},{"name":"1.0.0-rc1","sha":"554959c940968504f1373cc49b5ede350f62ae40","kind":"commit","published_at":"2015-02-26T16:13:25.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.0.0-rc1","html_url":"https://github.com/mautic/mautic/releases/tag/1.0.0-rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.0.0-rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-rc1/manifests"},{"name":"1.0.0-beta4","sha":"23f57e8f98e84c4df5edee72b05036beb36f9279","kind":"commit","published_at":"2015-02-06T18:03:44.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.0.0-beta4","html_url":"https://github.com/mautic/mautic/releases/tag/1.0.0-beta4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.0.0-beta4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-beta4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-beta4/manifests"},{"name":"1.0.0-beta3","sha":"a7594c5b87a3e71893295d2e6b83c443b8782623","kind":"commit","published_at":"2015-01-08T23:58:08.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.0.0-beta3","html_url":"https://github.com/mautic/mautic/releases/tag/1.0.0-beta3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.0.0-beta3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-beta3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-beta3/manifests"},{"name":"1.0.0-beta2","sha":"30f7e311b7ba47f6ae70b98607b6f17540a8aaa7","kind":"tag","published_at":"2014-12-06T11:33:35.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.0.0-beta2","html_url":"https://github.com/mautic/mautic/releases/tag/1.0.0-beta2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.0.0-beta2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-beta2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-beta2/manifests"},{"name":"1.0.0-beta","sha":"afa541692d465e2b471387f56dd3d4d947f363b4","kind":"commit","published_at":"2014-12-03T18:27:02.000Z","download_url":"https://codeload.github.com/mautic/mautic/tar.gz/1.0.0-beta","html_url":"https://github.com/mautic/mautic/releases/tag/1.0.0-beta","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mautic/mautic@1.0.0-beta","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-beta","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/tags/1.0.0-beta/manifests"}]},"repo_metadata_updated_at":"2026-08-31T22:00:46.411Z","dependent_packages_count":2,"downloads":2694,"downloads_period":"total","dependent_repos_count":3,"rankings":{"downloads":19.090647467356675,"dependent_repos_count":17.202973133325013,"dependent_packages_count":6.027618414653089,"stargazers_count":0.061112709661155486,"forks_count":0.025208992735226636,"docker_downloads_count":0.8724839051422052,"average":7.213340770478894},"purl":"pkg:composer/mautic/core","advisories":[{"uuid":"GSA_kwCzR0hTQS0zZnE3LWM1bTgtZzg2eM4ABPH8","url":"https://github.com/advisories/GHSA-3fq7-c5m8-g86x","title":"Mautic user without privileged access to the Marketplace can install and uninstall composer packages","description":"### Summary\n\nA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked.\n\n### Impact\n\nA low-privileged user of the platform can install malicious code to obtain higher privileges.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2025-12-02T21:10:39.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.0,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":["https://github.com/mautic/mautic/security/advisories/GHSA-3fq7-c5m8-g86x","https://nvd.nist.gov/vuln/detail/CVE-2025-13828","https://github.com/advisories/GHSA-3fq7-c5m8-g86x"],"source_kind":"github","identifiers":["GHSA-3fq7-c5m8-g86x","CVE-2025-13828"],"repository_url":null,"blast_radius":0.0,"created_at":"2025-12-02T22:00:07.320Z","updated_at":"2026-01-23T01:00:31.264Z","epss_percentage":0.0005,"epss_percentile":0.15461,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"6.0.7","vulnerable_version_range":"\u003e= 6.0.0, \u003c 6.0.7"},{"first_patched_version":"5.2.9","vulnerable_version_range":"\u003e= 5.0.0, \u003c 5.2.9"},{"first_patched_version":"4.4.18","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.4.18"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2513,"downloads_period":"total"},"affected_versions":["4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","6.0.0","6.0.0-alpha","6.0.0-beta","6.0.0-beta2","6.0.0-rc","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.1","2.9.2","2.10.0","2.10.1","2.11.0","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","5.2.9","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0zZ2d2LXF3Y3AtajZ4Z84ABLo1","url":"https://github.com/advisories/GHSA-3ggv-qwcp-j6xg","title":"Mautic Vulnerable to User Enumeration via Response Timing","description":"### Impact\nThe attacker can validate if a user exists by checking the time login returns. This timing difference can be used to enumerate valid usernames, after which an attacker could attempt brute force attacks.\n\n### Patches\nThis vulnerability has been patched, implementing a timing-safe form login authenticator that ensures consistent response times regardless of whether a user exists or not.\n\n### Technical Details\nThe vulnerability was caused by different response times when:\n- A valid username was provided (password hashing occurred)\n- An invalid username was provided (no password hashing occurred)\n\nThe fix introduces a `TimingSafeFormLoginAuthenticator` that performs a dummy password hash verification even for non-existent users, ensuring consistent timing.\n\n### Workarounds\nNo workarounds are available. Users should upgrade to the patched version.\n\n### References\n- https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/03-Identity_Management_Testing/04-Testing_for_Account_Enumeration_and_Guessable_User_Account\n- https://github.com/mautic/mautic-security/pull/146","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-09-03T22:20:16.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.9,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/mautic/mautic/security/advisories/GHSA-3ggv-qwcp-j6xg","https://nvd.nist.gov/vuln/detail/CVE-2025-9824","https://github.com/mautic/mautic/commit/6bc4f5f1aabb13df12714ad0ea9fc281cbb867c6","https://github.com/mautic/mautic/commit/b4264c717ce31fbafafcefc04b02ecb9fb911e62","https://github.com/advisories/GHSA-3ggv-qwcp-j6xg"],"source_kind":"github","identifiers":["GHSA-3ggv-qwcp-j6xg","CVE-2025-9824"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2025-09-03T23:08:57.829Z","updated_at":"2026-01-20T22:01:00.326Z","epss_percentage":0.00077,"epss_percentile":0.23482,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"6.0.5","vulnerable_version_range":"\u003e= 6.0.0-alpha, \u003c 6.0.5"},{"first_patched_version":"5.2.8","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.2.8"},{"first_patched_version":"4.4.17","vulnerable_version_range":"\u003e= 4.4.0, \u003c 4.4.17"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","6.0.0","6.0.0-alpha","6.0.0-beta","6.0.0-beta2","6.0.0-rc","6.0.1","6.0.2","6.0.3","6.0.4"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.1","2.9.2","2.10.0","2.10.1","2.11.0","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","5.2.8","5.2.9","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05djhwLW04NW0tZjdtbc4ABLo0","url":"https://github.com/advisories/GHSA-9v8p-m85m-f7mm","title":"Mautic vulnerable to reflected XSS in lead:addLeadTags - Quick Add","description":"## Summary\n\nA Cross-Site Scripting (XSS) vulnerability allows an attacker to execute arbitrary JavaScript in the context of another user’s session. This occurs because user-supplied input is reflected back in the server’s response without proper sanitization or escaping, potentially enabling malicious actions such as session hijacking, credential theft, or unauthorized actions in the application.\n\n## Details\n\nThe vulnerability resides in the “Tags” input field on the /s/ajax?action=lead:addLeadTags endpoint. Although the server applies sanitization before storing the data or returning it later, the payload is executed immediately in the victim’s browser upon reflection, allowing an attacker to run arbitrary JavaScript in the user’s session.\n\n## Impact\nA Reflected XSS attack can have a significant impact, allowing attackers to steal sensitive user data like cookies, redirect users to malicious websites, manipulate the web page content, and essentially take control of a user's session within an application by executing malicious JavaScript code within the victim's browser, even if the server-side code is secure; essentially enabling them to perform actions as if they were the logged-in user.\n\n## References\n- [Web Security Academy: Cross-site scripting](https://portswigger.net/web-security/cross-site-scripting)\n- [Web Security Academy: Reflected cross-site scripting](https://portswigger.net/web-security/cross-site-scripting/reflected)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-09-03T22:18:39.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.8,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-9v8p-m85m-f7mm","https://nvd.nist.gov/vuln/detail/CVE-2025-9823","https://github.com/advisories/GHSA-9v8p-m85m-f7mm"],"source_kind":"github","identifiers":["GHSA-9v8p-m85m-f7mm","CVE-2025-9823"],"repository_url":"https://github.com/mautic/mautic","blast_radius":2.2901820226543794,"created_at":"2025-09-03T23:08:57.999Z","updated_at":"2026-01-13T22:00:54.716Z","epss_percentage":0.0009,"epss_percentile":0.26186,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"6.0.5","vulnerable_version_range":"\u003e= 6.0.0-alpha, \u003c 6.0.5"},{"first_patched_version":"5.2.8","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.2.8"},{"first_patched_version":"4.4.17","vulnerable_version_range":"\u003e= 4.4.0, \u003c 4.4.17"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","6.0.0","6.0.0-alpha","6.0.0-beta","6.0.0-beta2","6.0.0-rc","6.0.1","6.0.2","6.0.3","6.0.4"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.1","2.9.2","2.10.0","2.10.1","2.11.0","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","5.2.8","5.2.9","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00MzhtLTZtaHctaHE1d84ABLoz","url":"https://github.com/advisories/GHSA-438m-6mhw-hq5w","title":"Mautic vulnerable to secret data extraction via elfinder","description":"### Summary\n_A user with administrator rights can change the configuration of the mautic application and extract secrets that are not normally available._\n\n\n### Impact\n_An administrator who usually does not have access to certain parameters, such as database credentials, can disclose them._","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-09-03T22:18:20.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-438m-6mhw-hq5w","https://nvd.nist.gov/vuln/detail/CVE-2025-9822","https://github.com/mautic/mautic/commit/882c2c5be646e36f7b91e7c4b24f71aafa617cd5","https://github.com/mautic/mautic/commit/a310b1933de7cfefec03382a4d8c0d9dbbaa0600","https://github.com/advisories/GHSA-438m-6mhw-hq5w"],"source_kind":"github","identifiers":["GHSA-438m-6mhw-hq5w","CVE-2025-9822"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2025-09-03T23:08:58.125Z","updated_at":"2026-01-20T22:01:00.327Z","epss_percentage":0.00047,"epss_percentile":0.14926,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"6.0.5","vulnerable_version_range":"\u003e= 6.0.0-alpha, \u003c 6.0.5"},{"first_patched_version":"5.2.8","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.2.8"},{"first_patched_version":"4.4.17","vulnerable_version_range":"\u003e= 4.4.0, \u003c 4.4.17"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":["4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","6.0.0","6.0.0-alpha","6.0.0-beta","6.0.0-beta2","6.0.0-rc","6.0.1","6.0.2","6.0.3","6.0.4"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.1","2.9.2","2.10.0","2.10.1","2.11.0","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","5.2.8","5.2.9","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1oajZmLTdocDcteGc2Oc4ABLoy","url":"https://github.com/advisories/GHSA-hj6f-7hp7-xg69","title":"Mautic vulnerable to SSRF via webhook function","description":"### Summary\nUsers with webhook permissions can conduct SSRF via webhooks. If they have permission to view the webhook logs, the (partial) request response is also disclosed\n\n### Details\nWhen sending webhooks, the destination is not validated, causing SSRF.\n\n### Impact\nBypass of firewalls to interact with internal services. \nSee https://owasp.org/Top10/A10_2021-Server-Side_Request_Forgery_%28SSRF%29/ for more potential impact.\n\n### Resources\nhttps://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html for more information on SSRF and its fix","origin":"UNSPECIFIED","severity":"LOW","published_at":"2025-09-03T22:11:32.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":2.7,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-hj6f-7hp7-xg69","https://nvd.nist.gov/vuln/detail/CVE-2025-9821","https://github.com/mautic/mautic/commit/6084f6de4c88d1aeb5f6c73ea4fe1b09c98ea52b","https://github.com/mautic/mautic/commit/dc5bb1466c9a48fd34768dc8ff5888716b2916ba","https://github.com/advisories/GHSA-hj6f-7hp7-xg69"],"source_kind":"github","identifiers":["GHSA-hj6f-7hp7-xg69","CVE-2025-9821"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2025-09-03T23:08:58.243Z","updated_at":"2026-01-20T22:01:00.327Z","epss_percentage":0.00035,"epss_percentile":0.09871,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"6.0.5","vulnerable_version_range":"\u003e= 6.0.0-alpha, \u003c 6.0.5"},{"first_patched_version":"5.2.8","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.2.8"},{"first_patched_version":"4.4.17","vulnerable_version_range":"\u003e= 4.4.0, \u003c 4.4.17"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":["4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","6.0.0","6.0.0-alpha","6.0.0-beta","6.0.0-beta2","6.0.0-rc","6.0.1","6.0.2","6.0.3","6.0.4"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.1","2.9.2","2.10.0","2.10.1","2.11.0","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","5.2.8","5.2.9","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02dng5LTlyMmctODM3M84ABIbu","url":"https://github.com/advisories/GHSA-6vx9-9r2g-8373","title":"Mautic has an Open Redirect vulnerability on user unlock path.","description":"### Summary\nThis advisory addresses an Open Redirection vulnerability in Mautic's user unlocking endpoint. This vulnerability could be exploited by an attacker to redirect legitimate users to malicious websites, potentially leading to phishing attacks or the delivery of exploit kits.\n\nOpen Redirection via `returnUrl` Parameter: An Open Redirection vulnerability exists in the `/s/action/unlock/user.user/0` endpoint. The `returnUrl` parameter, intended for post-action redirection, is not properly validated. This allows an attacker to craft a URL that, when clicked by a user, redirects them to an arbitrary external website controlled by the attacker.\n\n### Mitigation\nUpdate Mautic to a version that properly validates or sanitizes the `returnUrl` parameter to ensure that redirects only occur to trusted, internal URLs or explicitly whitelisted domains.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-05-28T17:39:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-6vx9-9r2g-8373","https://nvd.nist.gov/vuln/detail/CVE-2025-5256","https://github.com/advisories/GHSA-6vx9-9r2g-8373"],"source_kind":"github","identifiers":["GHSA-6vx9-9r2g-8373","CVE-2025-5256"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2025-05-28T18:08:00.784Z","updated_at":"2026-01-22T03:01:30.006Z","epss_percentage":0.00032,"epss_percentile":0.08776,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"6.0.2","vulnerable_version_range":"\u003e= 6.0.0-alpha, \u003c 6.0.2"},{"first_patched_version":"5.2.6","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.2.6"},{"first_patched_version":"4.4.16","vulnerable_version_range":"\u003e= 1.0.0, \u003c 4.4.16"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","6.0.0","6.0.0-alpha","6.0.0-beta","6.0.0-beta2","6.0.0-rc","6.0.1"],"unaffected_versions":["5.2.6","5.2.7","5.2.8","5.2.9","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS12cGg1LWdocTMtcTc4Ms4ABIbt","url":"https://github.com/advisories/GHSA-vph5-ghq3-q782","title":"Mautic segment cloning doesn't have a proper permission check","description":"### Summary\nThis advisory addresses a security vulnerability in Mautic related to the segment cloning functionality. This vulnerability allows any authenticated user to clone segments without proper authorization checks.\n\nInsecure Direct Object Reference (IDOR) / Missing Authorization: A missing authorization vulnerability exists in the `cloneAction` of the segment management. This allows an authenticated user to bypass intended permission restrictions and clone segments even if they lack the necessary permissions to create new ones.\n\n### Mitigation\nUpdate Mautic to a version that implements proper authorization checks for the `cloneAction` within the `ListController.php`. Ensure that users attempting to clone segments possess the appropriate creation permissions.\n\n### Workarounds\nNone\n\nIf you have any questions or comments about this advisory:\nEmail us at security@mautic.org","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-05-28T17:38:58.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-vph5-ghq3-q782","https://nvd.nist.gov/vuln/detail/CVE-2024-47055","https://github.com/advisories/GHSA-vph5-ghq3-q782"],"source_kind":"github","identifiers":["GHSA-vph5-ghq3-q782","CVE-2024-47055"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2025-05-28T18:08:02.128Z","updated_at":"2026-01-22T15:01:45.424Z","epss_percentage":0.00047,"epss_percentile":0.1491,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"6.0.2","vulnerable_version_range":"\u003e= 6.0.0-alpha, \u003c 6.0.2"},{"first_patched_version":"5.2.6","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.2.6"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","6.0.0","6.0.0-alpha","6.0.0-beta","6.0.0-beta2","6.0.0-rc","6.0.1"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.1","2.9.2","2.10.0","2.10.1","2.11.0","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.2.6","5.2.7","5.2.8","5.2.9","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00MjR4LWN4dmgtd3E5cM4ABIbs","url":"https://github.com/advisories/GHSA-424x-cxvh-wq9p","title":"Mautic allows user name enumeration due to response time difference on password reset form","description":"### Summary\n\nThis advisory addresses a security vulnerability in Mautic related to the \"Forget your password\" functionality. This vulnerability could be exploited by unauthenticated users to enumerate valid usernames.\n\nUser Enumeration via Timing Attack: A user enumeration vulnerability exists in the \"Forget your password\" functionality. Differences in response times for existing and non-existing users, combined with a lack of request limiting, allow an attacker to determine the existence of usernames through a timing-based attack.\n\n### Mitigation\nPlease update to a version that addresses this timing vulnerability, where password reset responses are normalized to respond at the same time regardless of user existence.\n\n### Workarounds\nNone\n\nIf you have any questions or comments about this advisory:\nEmail us at security@mautic.org","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-05-28T17:38:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-424x-cxvh-wq9p","https://nvd.nist.gov/vuln/detail/CVE-2024-47057","https://github.com/advisories/GHSA-424x-cxvh-wq9p"],"source_kind":"github","identifiers":["GHSA-424x-cxvh-wq9p","CVE-2024-47057"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2025-05-28T18:08:02.155Z","updated_at":"2026-01-21T01:01:27.387Z","epss_percentage":0.00055,"epss_percentile":0.17475,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"6.0.2","vulnerable_version_range":"\u003e= 6.0.0-alpha, \u003c 6.0.2"},{"first_patched_version":"5.2.6","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.2.6"},{"first_patched_version":"4.4.16","vulnerable_version_range":"\u003e= 1.0.0, \u003c 4.4.16"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","6.0.0","6.0.0-alpha","6.0.0-beta","6.0.0-beta2","6.0.0-rc","6.0.1"],"unaffected_versions":["5.2.6","5.2.7","5.2.8","5.2.9","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1oMndnLXY4d2ctamh4aM4ABIbr","url":"https://github.com/advisories/GHSA-h2wg-v8wg-jhxh","title":"Mautic does not shield .env files from web traffic","description":"### Summary \nThis advisory addresses a security vulnerability in Mautic where sensitive `.env` configuration files may be directly accessible via a web browser. This exposure could lead to the disclosure of sensitive information, including database credentials, API keys, and other critical system configurations.\n\nSensitive Information Disclosure via `.env` File Exposure: The `.env` file, which typically contains environment variables and sensitive application configurations, is directly accessible via a web browser due to missing web server configurations that restrict access to such files. This allows an unauthenticated attacker to view the contents of this file by simply navigating to its URL.\n\n### Mitigation\nUpdate Mautic to the latest Mautic version.\nBy default, Mautic does not use `.env` files for production data.\n\n**For Apache users:** Ensure your web server is configured to respect `.htaccess` files.\n\n**For Nginx users:** As Nginx does not inherently support `.htaccess` files, you must manually add a configuration block to your Nginx server configuration to deny access to `.env` files. Add the following to your Nginx configuration for the Mautic site:\n\n```nginx\nlocation ~ /\\.env {\n    deny all;\n}\n```\n\nAfter modifying your Nginx configuration, remember to reload or restart your Nginx service for the changes to take effect.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-05-28T17:38:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.1,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","references":["https://github.com/mautic/mautic/security/advisories/GHSA-h2wg-v8wg-jhxh","https://nvd.nist.gov/vuln/detail/CVE-2024-47056","https://github.com/advisories/GHSA-h2wg-v8wg-jhxh"],"source_kind":"github","identifiers":["GHSA-h2wg-v8wg-jhxh","CVE-2024-47056"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2025-05-28T18:08:02.181Z","updated_at":"2026-01-22T00:01:37.449Z","epss_percentage":0.00017,"epss_percentile":0.03494,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"6.0.2","vulnerable_version_range":"\u003e= 6.0.0-alpha, \u003c 6.0.2"},{"first_patched_version":"5.2.6","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.2.6"},{"first_patched_version":"4.4.16","vulnerable_version_range":"\u003e= 4.4.0, \u003c 4.4.16"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":["4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","6.0.0","6.0.0-alpha","6.0.0-beta","6.0.0-beta2","6.0.0-rc","6.0.1"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.1","2.9.2","2.10.0","2.10.1","2.11.0","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","5.2.6","5.2.7","5.2.8","5.2.9","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jcXg0LTl2cWYtcTNtOM4ABIbq","url":"https://github.com/advisories/GHSA-cqx4-9vqf-q3m8","title":"Mautic's Predictable Page Indexing Might Lead to Sensitive Data Exposure","description":"### Summary\nThis advisory addresses a security vulnerability in Mautic where unpublished page previews could be accessed by unauthenticated users and potentially indexed by search engines. This could lead to the unintended disclosure of draft content or sensitive information.\n\nUnauthorized Access to Unpublished Page Previews: The page preview functionality for unpublished content, accessible via predictable URLs (e.g., `/page/preview/1`, `/page/preview/2`), lacked proper authorization checks. This allowed any unauthenticated user to view content that was not yet intended for public release, and allowed search engines to index these private preview URLs, making the content publicly discoverable.\n\n### Mitigation\nMautic has patched this vulnerability by enforcing proper permission checks on preview pages. Users should upgrade to the patched version of Mautic or later.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-05-28T17:38:13.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","references":["https://github.com/mautic/mautic/security/advisories/GHSA-cqx4-9vqf-q3m8","https://nvd.nist.gov/vuln/detail/CVE-2025-5257","https://github.com/advisories/GHSA-cqx4-9vqf-q3m8"],"source_kind":"github","identifiers":["GHSA-cqx4-9vqf-q3m8","CVE-2025-5257"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2025-05-28T18:08:02.205Z","updated_at":"2026-01-20T22:01:30.932Z","epss_percentage":0.00175,"epss_percentile":0.39498,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"6.0.2","vulnerable_version_range":"\u003e= 6.0.0-alpha, \u003c 6.0.2"},{"first_patched_version":"5.2.6","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.2.6"},{"first_patched_version":"4.4.16","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.4.16"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","6.0.0","6.0.0-alpha","6.0.0-beta","6.0.0-beta2","6.0.0-rc","6.0.1"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.1","2.9.2","2.10.0","2.10.1","2.11.0","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00dzJ3LTM2dm0tYzhoZs4ABEx7","url":"https://github.com/advisories/GHSA-4w2w-36vm-c8hf","title":"Mautic allows Relative Path Traversal in assets file upload","description":"### Summary\n\nThis advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server.\n\n* **Improper Limitation of a Pathname to a Restricted Directory:** A vulnerability exists in the asset upload functionality that allows users to upload files to directories outside of the intended temporary directory.\n\n### Mitigation\n\nPlease update to 5.2.3 or later.\n\n### Workarounds\n\nNone\n\n### References\n\nIf you have any questions or comments about this advisory:\n\nEmail us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-02-26T20:09:28.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","references":["https://github.com/mautic/mautic/security/advisories/GHSA-4w2w-36vm-c8hf","https://github.com/mautic/mautic/commit/e6aaad99f399c5df1ce6273609920098e5c2564a","https://nvd.nist.gov/vuln/detail/CVE-2022-25773","https://github.com/advisories/GHSA-4w2w-36vm-c8hf"],"source_kind":"github","identifiers":["GHSA-4w2w-36vm-c8hf","CVE-2022-25773"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2025-02-26T21:07:47.390Z","updated_at":"2026-01-20T17:32:54.512Z","epss_percentage":0.00165,"epss_percentile":0.38035,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"5.2.3","vulnerable_version_range":"\u003c 5.2.3"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2"],"unaffected_versions":["5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS04eHY3LWcycTMtZnFnY84ABEx6","url":"https://github.com/advisories/GHSA-8xv7-g2q3-fqgc","title":"Mautic allows Improper Authorization in Reporting API","description":"### Summary\n\nThis advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensitive report data.\n\n* **Improper Authorization:** An authorization flaw exists in Mautic's API Authorization implementation. Any authenticated user, regardless of assigned roles or permissions, can access all reports and their associated data via the API.  This bypasses the intended access controls governed by the \"Reporting Permissions \u003e View Own\" and \"Reporting Permissions \u003e View Others\" permissions, which should restrict access to non-System Reports. \n\n### Mitigation\n\nPlease update to Mautic 5.2.3 or later\n\n### Workarounds\n\n Disable the API in Mautic. See [documentation](https://docs.mautic.org/en/5.2/configuration/settings.html#api-settings).\n\n### References\nhttps://cwe.mitre.org/data/definitions/285.html\nhttps://docs.mautic.org/en/5.2/configuration/settings.html#api-settings\n\nIf you have any questions or comments about this advisory:\n\nEmail us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-02-26T20:08:30.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.7,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-8xv7-g2q3-fqgc","https://github.com/mautic/mautic/commit/9d7ee57c92502ef77cddb091011c5ffef14b11ee","https://nvd.nist.gov/vuln/detail/CVE-2024-47053","https://cwe.mitre.org/data/definitions/287.html","https://docs.mautic.org/en/5.2/configuration/settings.html#api-settings","https://github.com/advisories/GHSA-8xv7-g2q3-fqgc"],"source_kind":"github","identifiers":["GHSA-8xv7-g2q3-fqgc","CVE-2024-47053"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2025-02-26T21:07:47.828Z","updated_at":"2026-01-20T17:32:54.513Z","epss_percentage":0.00144,"epss_percentile":0.35265,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"5.2.3","vulnerable_version_range":"\u003e= 1.0.1, \u003c 5.2.3"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2"],"unaffected_versions":["1.0.0","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03M2d4LXg3cjktNzd4Ms4ABEx5","url":"https://github.com/advisories/GHSA-73gx-x7r9-77x2","title":"Mautic allows Remote Code Execution and File Deletion in Asset Uploads","description":"### Summary\nThis advisory addresses two critical security vulnerabilities present in Mautic versions before 5.2.3.  These vulnerabilities could be exploited by authenticated users.\n\n* **Remote Code Execution (RCE) via Asset Upload:**  A Remote Code Execution vulnerability has been identified in the asset upload functionality. Insufficient enforcement of allowed file extensions allows an attacker to bypass restrictions and upload executable files, such as PHP scripts.\n\n* **Path Traversal File Deletion:** A Path Traversal vulnerability exists in the upload validation process.  Due to improper handling of path components, an authenticated user can manipulate the file deletion process to delete arbitrary files on the host system. \n  \n### Mitigation\nPlease update to 5.2.3 or later.\n\n### Workarounds\nNone\n\n### References\nhttps://owasp.org/www-community/attacks/Code_Injection\nhttps://owasp.org/www-community/attacks/Path_Traversal\n\nIf you have any questions or comments about this advisory:\n\nEmail us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2025-02-26T20:07:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L","references":["https://github.com/mautic/mautic/security/advisories/GHSA-73gx-x7r9-77x2","https://github.com/mautic/mautic/commit/75bc488ce98b9c8ec01114984049fc1c42c0cae5","https://nvd.nist.gov/vuln/detail/CVE-2024-47051","https://owasp.org/www-community/attacks/Code_Injection","https://owasp.org/www-community/attacks/Path_Traversal","https://github.com/advisories/GHSA-73gx-x7r9-77x2"],"source_kind":"github","identifiers":["GHSA-73gx-x7r9-77x2","CVE-2024-47051"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2025-02-26T21:07:47.853Z","updated_at":"2026-01-20T17:32:54.513Z","epss_percentage":0.00738,"epss_percentile":0.72255,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"5.2.3","vulnerable_version_range":"\u003c 5.2.3"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2"],"unaffected_versions":["5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01aGM1LWZ4cjktNWZyY84AA_rw","url":"https://github.com/advisories/GHSA-5hc5-fxr9-5frc","title":"Duplicate Advisory: Mautic has insufficient authentication in upgrade flow","description":"# Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-qf6m-6m4g-rmrc. This link is maintained to preserve external references.\n\n# Original Description\nMautic allows you to update the application via an upgrade script.\n\nThe upgrade logic isn't shielded off correctly, which may lead to vulnerable situation.\n\nThis vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way to be vulnerable.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-09-19T00:31:32.000Z","withdrawn_at":"2025-02-21T21:43:09.000Z","classification":"GENERAL","cvss_score":7.4,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-qf6m-6m4g-rmrc","https://nvd.nist.gov/vuln/detail/CVE-2022-25770","https://github.com/advisories/GHSA-5hc5-fxr9-5frc"],"source_kind":"github","identifiers":["GHSA-5hc5-fxr9-5frc"],"repository_url":"https://github.com/mautic/mautic","blast_radius":3.5306972849255023,"created_at":"2024-09-19T17:06:11.672Z","updated_at":"2026-01-23T18:02:49.157Z","epss_percentage":null,"epss_percentile":null,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"5.1.1","vulnerable_version_range":"\u003e= 5.0.0, \u003c 5.1.1"},{"first_patched_version":"4.4.13","vulnerable_version_range":"\u003e= 1.0.0-beta3, \u003c 4.4.13"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2513,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0"],"unaffected_versions":["4.4.13","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS04dmZmLTM1cW0tcWp2ds4AA_rk","url":"https://github.com/advisories/GHSA-8vff-35qm-qjvv","title":"Mautic allows users enumeration due to weak password login","description":"### Summary\n\nWhen logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak.\n\nHowever when an incorrect username is provided along side with weak password, the application responds with ’Invalid credentials’ notification.\n\nThis difference could be used to perform username enumeration.\n\n### Patches\n\nUpdate to 5.1.1 or later.\n\nIf you have any questions or comments about this advisory:\n\nEmail us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-09-18T22:10:05.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.9,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-8vff-35qm-qjvv","https://nvd.nist.gov/vuln/detail/CVE-2024-47059","https://github.com/advisories/GHSA-8vff-35qm-qjvv"],"source_kind":"github","identifiers":["GHSA-8vff-35qm-qjvv","CVE-2024-47059"],"repository_url":"https://github.com/mautic/mautic","blast_radius":3.292136657565671,"created_at":"2024-09-18T23:05:51.872Z","updated_at":"2025-11-22T04:02:22.278Z","epss_percentage":0.00311,"epss_percentile":0.53744,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"5.1.1","vulnerable_version_range":"\u003e= 5.1.0, \u003c 5.1.1"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2508,"downloads_period":"total"},"affected_versions":["5.1.0"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.1","2.9.2","2.10.0","2.10.1","2.11.0","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xZjZtLTZtNGctcm1yY84AA_rj","url":"https://github.com/advisories/GHSA-qf6m-6m4g-rmrc","title":"Mautic has insufficient authentication in upgrade flow","description":"### Impact\n\nMautic allows you to update the application via an upgrade script.\n\nThe upgrade logic isn't shielded off correctly, which may lead to vulnerable situation.\n\nThis vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way to be vulnerable\n\n### Patches\n\nPlease upgrade to 4.4.1 or 5.1.1 or later.\n\n### Workarounds\nNone.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-09-18T22:06:13.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.1,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-qf6m-6m4g-rmrc","https://github.com/mautic/mautic/commit/73b18e9a434a28e528fe0e3d03620e7367bdcdca","https://github.com/mautic/mautic/commit/aee7bfb7510a83acf178a7f02da9661c040e9abf","https://nvd.nist.gov/vuln/detail/CVE-2022-25770","https://github.com/advisories/GHSA-qf6m-6m4g-rmrc"],"source_kind":"github","identifiers":["GHSA-qf6m-6m4g-rmrc","CVE-2022-25770"],"repository_url":"https://github.com/mautic/mautic","blast_radius":9.840036521142892,"created_at":"2024-09-18T23:05:51.892Z","updated_at":"2026-01-22T22:03:01.491Z","epss_percentage":0.00296,"epss_percentile":0.52486,"packages":[{"ecosystem":"packagist","package_name":"mautic/core-lib","versions":[{"first_patched_version":"5.1.1","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.1.1"},{"first_patched_version":"4.4.13","vulnerable_version_range":"\u003e= 1.0.0-beta3, \u003c 4.4.13"}],"purl":null,"statistics":{"dependent_packages_count":56,"dependent_repos_count":85,"downloads":85953,"downloads_period":"total"},"affected_versions":["4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.1","4.4.1-alpha","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0"],"unaffected_versions":["4.4.13","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]},{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"5.1.1","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.1.1"},{"first_patched_version":"4.4.13","vulnerable_version_range":"\u003e= 1.0.0-beta3, \u003c 4.4.13"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0"],"unaffected_versions":["4.4.13","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS14cGM1LXJyMzktdjh2Ms4AA_ri","url":"https://github.com/advisories/GHSA-xpc5-rr39-v8v2","title":"Mautic has an XSS in contact tracking and page hits report","description":"### Summary\nPrior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report.\n\n### Patches\nPlease update to 4.4.13 or 5.1.1 or later.\n\n### Workarounds\nNone\n\n### References\nhttps://owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_(XSS)\nhttps://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/02-Testing_for_Stored_Cross_Site_Scripting\n\nIf you have any questions or comments about this advisory:\n\nEmail us at [security@mautic.org](mailto:security@mautic.org)\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-09-18T22:05:59.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.1,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-xpc5-rr39-v8v2","https://github.com/mautic/mautic/commit/550e33562d03363f7592fa9354259787a23a1d98","https://github.com/mautic/mautic/commit/629165ac905c53bbb44feb5a6dbadb1dfd6d5564","https://nvd.nist.gov/vuln/detail/CVE-2021-27917","https://github.com/advisories/GHSA-xpc5-rr39-v8v2"],"source_kind":"github","identifiers":["GHSA-xpc5-rr39-v8v2","CVE-2021-27917"],"repository_url":"https://github.com/mautic/mautic","blast_radius":9.840036521142892,"created_at":"2024-09-18T23:05:51.920Z","updated_at":"2026-01-22T21:02:53.487Z","epss_percentage":0.00332,"epss_percentile":0.55501,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"5.1.1","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.1.1"},{"first_patched_version":"4.4.13","vulnerable_version_range":"\u003e= 1.0.0-beta4, \u003c 4.4.13"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0"],"unaffected_versions":["4.4.13","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]},{"ecosystem":"packagist","package_name":"mautic/core-lib","versions":[{"first_patched_version":"5.1.1","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.1.1"},{"first_patched_version":"4.4.13","vulnerable_version_range":"\u003e= 1.0.0-beta4, \u003c 4.4.13"}],"purl":null,"statistics":{"dependent_packages_count":56,"dependent_repos_count":85,"downloads":85953,"downloads_period":"total"},"affected_versions":["4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.1","4.4.1-alpha","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0"],"unaffected_versions":["4.4.13","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03M2dyLTMyd2ctcWhoN84AA_rh","url":"https://github.com/advisories/GHSA-73gr-32wg-qhh7","title":"Mautic vulnerable to XSS in contact/company tracking (no authentication)","description":"## Summary\nPrior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.\n  \n## Patches\nPlease update to 4.4.13 or 5.1.1 or later.\n\n## Workarounds\nNone\n\n## References\nhttps://owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_(XSS)\nhttps://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/02-Testing_for_Stored_Cross_Site_Scripting\n\nIf you have any questions or comments about this advisory:\nEmail us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-09-18T22:05:30.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.1,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-73gr-32wg-qhh7","https://nvd.nist.gov/vuln/detail/CVE-2024-47050","https://github.com/mautic/mautic/commit/0f21a3aa9c896788e1986fae0d7f166fc7a14c30","https://github.com/mautic/mautic/commit/43db5e492c0ef82c917745849d5b454dbc8ca2c4","https://github.com/advisories/GHSA-73gr-32wg-qhh7"],"source_kind":"github","identifiers":["GHSA-73gr-32wg-qhh7","CVE-2024-47050"],"repository_url":"https://github.com/mautic/mautic","blast_radius":9.840036521142892,"created_at":"2024-09-18T23:05:51.942Z","updated_at":"2025-12-30T22:02:37.360Z","epss_percentage":0.00642,"epss_percentile":0.69829,"packages":[{"ecosystem":"packagist","package_name":"mautic/core-lib","versions":[{"first_patched_version":"5.1.1","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.1.1"},{"first_patched_version":"4.4.13","vulnerable_version_range":"\u003e= 2.6.0, \u003c 4.4.13"}],"purl":null,"statistics":{"dependent_packages_count":56,"dependent_repos_count":85,"downloads":85953,"downloads_period":"total"},"affected_versions":["4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.1","4.4.1-alpha","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0"],"unaffected_versions":["4.4.13","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]},{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"5.1.1","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.1.1"},{"first_patched_version":"4.4.13","vulnerable_version_range":"\u003e= 2.6.0, \u003c 4.4.13"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","4.4.13","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS14djY4LXJybXctOXh3Zs4AA_rg","url":"https://github.com/advisories/GHSA-xv68-rrmw-9xwf","title":"Mautic vulnerable to Cross-site Scripting (XSS) - stored (edit form HTML field)","description":"### Impact\nWith access to edit a Mautic form, the attacker can add Cross-Site Scripting stored in the html filed. This could be used to steal sensitive information from the user's current session.\n\n### Patches\nUpgrade to 4.4.13 or 5.1.1 or later.\n\n### Workarounds\nNone\n\n### References\n- https://owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_(XSS)\n- https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/02-Testing_for_Stored_Cross_Site_Scripting\n\nIf you have any questions or comments about this advisory:\n\nEmail us at [security@mautic.org](mailto:security@mautic.org)\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-09-18T22:05:00.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.1,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-xv68-rrmw-9xwf","https://nvd.nist.gov/vuln/detail/CVE-2024-47058","https://github.com/mautic/mautic/commit/344b908ef690283e7d8d3fc5cc1327396a1c3046","https://github.com/mautic/mautic/commit/88153a15b3cea331b7036d956b880c69e81a0032","https://github.com/advisories/GHSA-xv68-rrmw-9xwf"],"source_kind":"github","identifiers":["GHSA-xv68-rrmw-9xwf","CVE-2024-47058"],"repository_url":"https://github.com/mautic/mautic","blast_radius":2.4333183990702785,"created_at":"2024-09-18T23:05:51.970Z","updated_at":"2026-01-20T17:33:43.282Z","epss_percentage":0.00186,"epss_percentile":0.40497,"packages":[{"ecosystem":"packagist","package_name":"mautic/core-lib","versions":[{"first_patched_version":"4.4.13","vulnerable_version_range":"\u003e= 1.0.0-beta, \u003c 4.4.13"},{"first_patched_version":"5.1.1","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.1.1"}],"purl":null,"statistics":{"dependent_packages_count":56,"dependent_repos_count":85,"downloads":85953,"downloads_period":"total"},"affected_versions":["4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.1","4.4.1-alpha","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0"],"unaffected_versions":["4.4.13","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]},{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"4.4.13","vulnerable_version_range":"\u003e= 1.0.0-beta, \u003c 4.4.13"},{"first_patched_version":"5.1.1","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.1.1"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0"],"unaffected_versions":["4.4.13","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS14M2p4LTV3Nm0tcTJmY84AA_rI","url":"https://github.com/advisories/GHSA-x3jx-5w6m-q2fc","title":"Mautic vulnerable to Improper Access Control in UI upgrade process","description":"### Impact\nThe logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to this patch being applied it might be possible for an attacker to access the Mautic version number or to execute parts of the upgrade process without permission. As upgrading in the user interface is deprecated, this functionality is no longer required.\n\n### Patches\nUpgrade to 4.4.13 or 5.1.1 or later.\n\n### Workarounds\nNone.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-09-18T17:43:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.3,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-x3jx-5w6m-q2fc","https://github.com/mautic/mautic/commit/89f964d06f00688016b38a56dfd9e95fc676c7ce","https://github.com/mautic/mautic/commit/925aeee7d3dbb6ca67f92d9dc5893d99250f739b","https://nvd.nist.gov/vuln/detail/CVE-2022-25768","https://github.com/advisories/GHSA-x3jx-5w6m-q2fc"],"source_kind":"github","identifiers":["GHSA-x3jx-5w6m-q2fc","CVE-2022-25768"],"repository_url":"https://github.com/mautic/mautic","blast_radius":16.01417708342863,"created_at":"2024-09-18T18:06:02.987Z","updated_at":"2026-01-22T19:03:04.428Z","epss_percentage":0.00272,"epss_percentile":0.50327,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"5.1.1","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.1.1"},{"first_patched_version":"4.4.13","vulnerable_version_range":"\u003e= 1.1.3, \u003c 4.4.13"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","4.4.13","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]},{"ecosystem":"packagist","package_name":"mautic/core-lib","versions":[{"first_patched_version":"5.1.1","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.1.1"},{"first_patched_version":"4.4.13","vulnerable_version_range":"\u003e= 1.1.3, \u003c 4.4.13"}],"purl":null,"statistics":{"dependent_packages_count":56,"dependent_repos_count":85,"downloads":85953,"downloads_period":"total"},"affected_versions":["4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.1","4.4.1-alpha","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0"],"unaffected_versions":["4.4.13","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00MnE3LTk1ajctdzYybc4AA8GE","url":"https://github.com/advisories/GHSA-42q7-95j7-w62m","title":"Mautic is vulnerable to XSS vulnerability","description":"### Impact\nThis is a cross-site scripting vulnerability which affects every version of Mautic and could allow an attacker unauthorised administrator level access to Mautic.\n\nThis vulnerability was reported by Naveen Sunkavally at Horizon3.ai.\n\n### Patches\nUpgrade to 3.2.4 or 2.16.5.\n\nLink to patch for 2.x versions: https://github.com/mautic/mautic/compare/2.16.4...2.16.5.diff\n\nLink to patch for 3.x versions: https://github.com/mautic/mautic/compare/3.2.2...3.2.4.diff\n\n### Workarounds\nNone\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Post in https://forum.mautic.org/c/support\n* Email us at security@mautic.org","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2024-05-15T17:33:20.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.7,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","references":["https://github.com/mautic/mautic/security/advisories/GHSA-42q7-95j7-w62m","https://nvd.nist.gov/vuln/detail/CVE-2020-35125","https://forum.mautic.org/c/announcements/16","https://github.com/FriendsOfPHP/security-advisories/blob/master/mautic/core/CVE-2020-35125.yaml","https://packagist.org/packages/mautic/core","https://www.horizon3.ai/disclosures/mautic-unauth-xss-to-rce","https://www.mautic.org/blog/community/security-release-all-versions-mautic-prior-2-16-5-and-3-2-4","https://github.com/advisories/GHSA-42q7-95j7-w62m"],"source_kind":"github","identifiers":["GHSA-42q7-95j7-w62m","CVE-2020-35125"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2024-05-15T18:05:17.462Z","updated_at":"2026-01-23T20:03:51.603Z","epss_percentage":0.01246,"epss_percentile":0.7869,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"2.16.5","vulnerable_version_range":"\u003c 2.16.5"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2513,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4"],"unaffected_versions":["2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tZ3Y4LXc0OWYtODIyd84AA69_","url":"https://github.com/advisories/GHSA-mgv8-w49f-822w","title":"Mautic: MST-48  Server-Side Request Forgery in Asset section ","description":"### Impact\nPrior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side Request Forgery (SSRF) vulnerability.\n\n### Patches\nUpdate to 4.4.12 or 5.0.4\n\n### Workarounds\nNone\n\n### References\n- https://owasp.org/Top10/A10_2021-Server-Side_Request_Forgery_%28SSRF%29/\n\nIf you have any questions or comments about this advisory:\n\nEmail us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-04-12T21:25:18.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H","references":["https://github.com/mautic/mautic/security/advisories/GHSA-mgv8-w49f-822w","https://github.com/mautic/mautic/commit/b4b4ab5f0613854152ceb7b5e5228acf50648fd0","https://github.com/mautic/mautic/commit/c54befd9eaaa49e4fc10a0fe22435c09ef2821b2","https://nvd.nist.gov/vuln/detail/CVE-2022-25777","https://github.com/advisories/GHSA-mgv8-w49f-822w"],"source_kind":"github","identifiers":["GHSA-mgv8-w49f-822w","CVE-2022-25777"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2024-04-12T22:04:39.295Z","updated_at":"2026-01-21T00:04:27.778Z","epss_percentage":0.00138,"epss_percentile":0.34438,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"5.0.4","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.0.4"},{"first_patched_version":"4.4.12","vulnerable_version_range":"\u003e= 1.0.0-beta4, \u003c 4.4.12"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3"],"unaffected_versions":["4.4.12","4.4.13","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xangzLTJnMzUtNmh2OM4AA69Z","url":"https://github.com/advisories/GHSA-qjx3-2g35-6hv8","title":"Mautic Sensitive Data Exposure due to inadequate user permission settings","description":"### Impact\nPrior to the patched version, logged in users of Mautic are able to access areas of the application that they should be prevented from accessing.\n\nUsers could potentially access sensitive data such as names and surnames, company names and stage names.\n\n### Patches\nUpdate to 4.4.12 and 5.0.4\n\n### Workarounds\nNo\n\n### References\nhttps://owasp.org/www-project-top-ten/2017/A3_2017-Sensitive_Data_Exposure\n","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-04-12T17:28:52.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H","references":["https://github.com/mautic/mautic/security/advisories/GHSA-qjx3-2g35-6hv8","https://github.com/mautic/mautic/commit/22bdd0796ca6e1e985708b89ad5c07147630fecd","https://github.com/mautic/mautic/commit/2cc4af975fe01c264d439acc1451c936e7114644","https://nvd.nist.gov/vuln/detail/CVE-2022-25776","https://github.com/advisories/GHSA-qjx3-2g35-6hv8"],"source_kind":"github","identifiers":["GHSA-qjx3-2g35-6hv8","CVE-2022-25776"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2024-04-12T18:04:54.175Z","updated_at":"2026-01-21T00:04:27.782Z","epss_percentage":0.00043,"epss_percentile":0.12583,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"5.0.4","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.0.4"},{"first_patched_version":"4.4.12","vulnerable_version_range":"\u003e= 1.0.2, \u003c 4.4.12"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3"],"unaffected_versions":["1.0.0","1.0.1","4.4.12","4.4.13","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qajZ3LTJjcWctN3A5NM4AA69Y","url":"https://github.com/advisories/GHSA-jj6w-2cqg-7p94","title":"Mautic SQL Injection in dynamic Reports","description":"### Impact\nPrior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle.\n\nThe user could retrieve and alter data like sensitive data, login, and depending on database permission the attacker can manipulate file systems.\n\n### Patches\nUpdate to 4.4.12 or 5.0.4\n\n### Workarounds\nNo\n\n### References\n- https://owasp.org/www-community/attacks/SQL_Injection\n- https://owasp.org/www-community/attacks/Blind_SQL_Injection","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-04-12T17:25:15.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.6,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","references":["https://github.com/mautic/mautic/security/advisories/GHSA-jj6w-2cqg-7p94","https://github.com/mautic/mautic/commit/cab65e0acc4f23c4f07c117dee1b69dac5abed3f","https://github.com/mautic/mautic/commit/e75b1eea16309588f069169b5882cf53f854dbd8","https://nvd.nist.gov/vuln/detail/CVE-2022-25775","https://github.com/advisories/GHSA-jj6w-2cqg-7p94"],"source_kind":"github","identifiers":["GHSA-jj6w-2cqg-7p94","CVE-2022-25775"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2024-04-12T18:04:54.206Z","updated_at":"2026-01-21T00:04:27.782Z","epss_percentage":0.00051,"epss_percentile":0.1565,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"5.0.4","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.0.4"},{"first_patched_version":"4.4.12","vulnerable_version_range":"\u003e= 2.14.1, \u003c 4.4.12"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.1","2.9.2","2.10.0","2.10.1","2.11.0","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","4.4.12","4.4.13","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05ZmN4LWN2NTYtdzU4cM4AA69X","url":"https://github.com/advisories/GHSA-9fcx-cv56-w58p","title":"Mautic vulnerable to Relative Path Traversal / Arbitrary File Deletion due to GrapesJS builder","description":"### Impact\nPrior to the patched version, logged in users of Mautic are vulnerable to Relative Path Traversal/Arbitrary File Deletion.  Regardless of the level of access the Mautic user had, they could delete files other than those in the media folders such as system files, libraries or other important files.\n\nThis vulnerability exists in the implementation of the GrapesJS builder in Mautic.\n\n### Patches\nUpdate to 4.4.12 or 5.0.4.\n\n### Workarounds\nNo\n\n### References\n- https://cwe.mitre.org/data/definitions/23.html\n- https://cwe.mitre.org/data/definitions/22.html\n- https://attack.mitre.org/techniques/T1630/002/\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n\nEmail us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-04-12T17:07:12.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.2,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-9fcx-cv56-w58p","https://github.com/mautic/mautic/commit/546045ff9c74dd8b3dac36c4ab3674380262c65a","https://github.com/mautic/mautic/commit/95e8df3ae6730c725f1848d70e7992da369518f3","https://nvd.nist.gov/vuln/detail/CVE-2021-27916","https://github.com/advisories/GHSA-9fcx-cv56-w58p"],"source_kind":"github","identifiers":["GHSA-9fcx-cv56-w58p","CVE-2021-27916"],"repository_url":"https://github.com/mautic/mautic","blast_radius":3.4352730339815696,"created_at":"2024-04-12T18:04:54.253Z","updated_at":"2026-01-22T00:04:19.458Z","epss_percentage":0.00152,"epss_percentile":0.36396,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"5.0.4","vulnerable_version_range":"\u003e= 5.0.0-alpha, \u003c 5.0.4"},{"first_patched_version":"4.4.12","vulnerable_version_range":"\u003e= 3.3.0, \u003c 4.4.12"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","5.0.0","5.0.0-alpha","5.0.0-alpha1","5.0.0-beta1","5.0.0-beta2","5.0.0-rc1","5.0.0-rc2","5.0.1","5.0.2","5.0.3"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.1","2.9.2","2.10.0","2.10.1","2.11.0","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","4.4.12","4.4.13","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1maGN4LWY3amctangzZs4AA68T","url":"https://github.com/advisories/GHSA-fhcx-f7jg-jx3f","title":"Mautic vulnerable to cross-site scripting in notifications via saving Dashboards","description":"### Impact\nPrior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic.\n\nUsers could inject malicious code into the notification when saving Dashboards.\n\n### Patches\nUpdate to Mautic 4.4.12. \n\n### Workarounds\nNone\n\n### References\n- https://owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_(XSS)\n\nIf you have any questions or comments about this advisory:\n\nEmail us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-04-12T13:52:54.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-fhcx-f7jg-jx3f","https://github.com/mautic/mautic/commit/e6d58de241b8c34126042dcb314d60eb5fc7b151","https://nvd.nist.gov/vuln/detail/CVE-2022-25774","https://github.com/advisories/GHSA-fhcx-f7jg-jx3f"],"source_kind":"github","identifiers":["GHSA-fhcx-f7jg-jx3f","CVE-2022-25774"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2024-04-12T14:04:49.444Z","updated_at":"2026-01-21T00:04:27.783Z","epss_percentage":0.00041,"epss_percentile":0.12033,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"4.4.12","vulnerable_version_range":"\u003c 4.4.12"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11"],"unaffected_versions":["4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0ycmM1LTI3NTUtdjQyMs4AA671","url":"https://github.com/advisories/GHSA-2rc5-2755-v422","title":"Mautic vulnerable to stored cross-site scripting in description field","description":"### Impact\nPrior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissions.\n\nThis could lead to the user having elevated access to the system.\n\n### Patches\nUpdate to 4.4.12\n\n### Workarounds\nNone\n\n### References\n- https://owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_(XSS)\n- https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/02-Testing_for_Stored_Cross_Site_Scripting\n\nIf you have any questions or comments about this advisory:\n\nEmail us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-04-11T21:36:29.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.6,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-2rc5-2755-v422","https://github.com/mautic/mautic/commit/2d648394e183b1d2d910cea32e89d40a5915b5d4","https://nvd.nist.gov/vuln/detail/CVE-2021-27915","https://github.com/advisories/GHSA-2rc5-2755-v422"],"source_kind":"github","identifiers":["GHSA-2rc5-2755-v422","CVE-2021-27915"],"repository_url":"https://github.com/mautic/mautic","blast_radius":4.103242790589097,"created_at":"2024-04-11T22:04:55.170Z","updated_at":"2025-11-22T02:03:32.148Z","epss_percentage":0.00142,"epss_percentile":0.35011,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"4.4.12","vulnerable_version_range":"\u003e= 1.0.0-beta2, \u003c 4.4.12"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2","4.3.0","4.3.0-beta","4.3.0-rc","4.3.1","4.4.0","4.4.0-beta","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11"],"unaffected_versions":["4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1wanBjLTg3bXAtNDMzMs4AArNG","url":"https://github.com/advisories/GHSA-pjpc-87mp-4332","title":"Cross-site Scripting vulnerability in Mautic's tracking pixel functionality","description":"### Impact\n\nMautic allows you to track open rates by using tracking pixels. \nThe tracking information is stored together with extra metadata of the tracking request.\n\nThe output isn't sufficiently filtered when showing the metadata of the tracking information, which may lead to a vulnerable situation.\n\n### Patches\n\nPlease upgrade to 4.3.0\n\n### Workarounds\nNone.\n\n### References\n* Internally tracked under MST-38\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [security@mautic.org](mailto:security@mautic.org)\n","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2022-05-25T22:36:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.6,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L","references":["https://github.com/mautic/mautic/security/advisories/GHSA-pjpc-87mp-4332","https://github.com/mautic/mautic/commit/462eb596027fd949efbf9ac5cb2b376805e9d246","https://nvd.nist.gov/vuln/detail/CVE-2022-25772","https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00847.html","https://github.com/advisories/GHSA-pjpc-87mp-4332"],"source_kind":"github","identifiers":["GHSA-pjpc-87mp-4332","CVE-2022-25772"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:12:22.439Z","updated_at":"2026-01-21T01:08:12.122Z","epss_percentage":0.02711,"epss_percentile":0.855,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"4.3.0","vulnerable_version_range":"\u003c 4.3.0"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","3.3.5","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.0-rc","4.2.0-rc1","4.2.1","4.2.2"],"unaffected_versions":["4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0zcHg1LXdqaDMtOXg2cs4AArCb","url":"https://github.com/advisories/GHSA-3px5-wjh3-9x6r","title":"Mautic stored Cross-site Scripting (XSS)","description":"Mautic before 3.2.4 is affected by stored XSS. An attacker with access to Social Monitoring, an application feature, could attack other users, including administrators. For example, an attacker could load an externally drafted JavaScript file that would allow them to eventually perform actions on the target user’s behalf, including changing the user’s password or email address or changing the attacker’s user role from a low-privileged user to an administrator account.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2022-05-24T22:28:09.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-35129","https://forum.mautic.org/c/announcements/16","https://labs.bishopfox.com/advisories/mautic-version-3.2.2","https://github.com/advisories/GHSA-3px5-wjh3-9x6r"],"source_kind":"github","identifiers":["GHSA-3px5-wjh3-9x6r","CVE-2020-35129"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-05-03T06:05:17.874Z","updated_at":"2026-01-20T17:34:52.457Z","epss_percentage":0.00617,"epss_percentile":0.69129,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"3.2.4","vulnerable_version_range":"\u003c 3.2.4"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2513,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3"],"unaffected_versions":["3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05OGoyLTNqdjctMjc0bc4AAnQi","url":"https://github.com/advisories/GHSA-98j2-3jv7-274m","title":"Mautic stored Cross-site Scripting (XSS)","description":"Mautic before 3.2.4 is affected by stored XSS. An attacker with permission to manage companies, an application feature, could attack other users, including administrators. For example, by loading an externally crafted JavaScript file, an attacker could eventually perform actions as the target user. These actions include changing the user passwords, altering user or email addresses, or adding a new administrator to the system.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2022-05-24T17:39:28.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-35128","https://forum.mautic.org/c/announcements/16","https://forum.mautic.org/t/security-release-for-all-versions-of-mautic-prior-to-2-16-5-and-3-2-4/17786","https://labs.bishopfox.com/advisories/mautic-version-3.2.2","https://github.com/advisories/GHSA-98j2-3jv7-274m"],"source_kind":"github","identifiers":["GHSA-98j2-3jv7-274m","CVE-2020-35128"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-04-24T00:05:15.978Z","updated_at":"2026-01-21T00:04:15.393Z","epss_percentage":0.00651,"epss_percentile":0.70092,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"2.16.5","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.16.5"},{"first_patched_version":"3.2.4","vulnerable_version_range":"\u003e= 3.2.0, \u003c 3.2.4"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":["2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0zNTh2LWNxamMtMnBjcc4AAXVw","url":"https://github.com/advisories/GHSA-358v-cqjc-2pcq","title":"Mautic Cross Site Scripting (XSS) vulnerability","description":"Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-05-14T03:41:55.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2017-1000506","https://github.com/mautic/mautic/issues/5222","https://github.com/advisories/GHSA-358v-cqjc-2pcq"],"source_kind":"github","identifiers":["GHSA-358v-cqjc-2pcq","CVE-2017-1000506"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2024-04-24T00:05:15.955Z","updated_at":"2026-01-21T00:04:15.392Z","epss_percentage":0.00398,"epss_percentile":0.5986900000000001,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"2.14.2","vulnerable_version_range":"\u003c= 2.11.0"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2513,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta"],"unaffected_versions":["2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS04MjU1LXFmMzQtNDRtcM4AAR1d","url":"https://github.com/advisories/GHSA-8255-qf34-44mp","title":"Sensitive Cookie Without HttpOnly and Secure Flag","description":"Mautic prior to 2.1.1 fails to set flags on session cookies","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-05-13T01:40:54.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2017-1000046","https://www.trustmatta.com/advisories/MATTA-2017-002.txt","https://github.com/mautic/mautic/issues/1969","https://github.com/mautic/mautic/pull/2311","https://github.com/mautic/mautic/pull/2311/commits/f9e7981f4acf0d37fd935c9b9d5d09d7e1a49bc6","https://github.com/advisories/GHSA-8255-qf34-44mp"],"source_kind":"github","identifiers":["GHSA-8255-qf34-44mp","CVE-2017-1000046"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2024-04-23T23:04:59.709Z","updated_at":"2026-01-21T00:04:15.394Z","epss_percentage":0.00282,"epss_percentile":0.51197,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"2.1.1","vulnerable_version_range":"\u003c 2.1.1"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0"],"unaffected_versions":["2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.1","2.9.2","2.10.0","2.10.1","2.11.0","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03dnZoLXhxcTQtdzc3N83zUg","url":"https://github.com/advisories/GHSA-7vvh-xqq4-w777","title":"Mautic Cross-Site Request Forgery (CSRF)","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Mautic 1.4.1 allow remote attackers to hijack the authentication of users for requests that (1) delete email campaigns or (2) delete contacts.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-05-13T01:12:01.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2017-8874","https://github.com/mautic/mautic/issues/3486","https://github.com/advisories/GHSA-7vvh-xqq4-w777"],"source_kind":"github","identifiers":["GHSA-7vvh-xqq4-w777","CVE-2017-8874"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2024-04-24T00:05:15.931Z","updated_at":"2026-01-21T00:04:15.392Z","epss_percentage":0.00118,"epss_percentile":0.31382,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":null,"vulnerable_version_range":"= 1.4.1"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":[],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.1","2.9.2","2.10.0","2.10.1","2.11.0","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tajZtLTI0NmgtOXc1Ns0vhQ","url":"https://github.com/advisories/GHSA-mj6m-246h-9w56","title":"Improper regex in htaccess file","description":"### Impact\nthe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application.\n\nThis logic isn't correct, as the regex in the second FilesMatch only checks the filename, not the full path.\n\n### Patches\nPlease upgrade to 3.3.5 or 4.2.0 \n\n### Workarounds\nNo\n\n### References\n\n- Release post: https://www.mautic.org/blog/community/mautic-4-2-one-small-step-mautic\n- Internally tracked under MST-32\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [security@mautic.org](mailto:security@mautic.org)\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2022-03-01T22:05:34.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/mautic/mautic/security/advisories/GHSA-mj6m-246h-9w56","https://github.com/advisories/GHSA-mj6m-246h-9w56"],"source_kind":"github","identifiers":["GHSA-mj6m-246h-9w56","CVE-2022-25769"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:12:34.567Z","updated_at":"2026-01-19T01:08:23.970Z","epss_percentage":0.00119,"epss_percentile":0.31473,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"4.2.0","vulnerable_version_range":"\u003e= 4.0.0, \u003c 4.2.0"},{"first_patched_version":"3.3.5","vulnerable_version_range":"\u003c 3.3.5"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","3.3.4","4.0.0","4.0.0-alpha1","4.0.0-beta","4.0.0-rc","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2"],"unaffected_versions":["3.3.5","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXg3ZzItd3JycC1yNmgz","url":"https://github.com/advisories/GHSA-x7g2-wrrp-r6h3","title":"Use of a Broken or Risky Cryptographic Algorithm","description":"## ✍️ Description\nThe function mt_rand is used to generate session tokens, this function is cryptographically flawed due to its nature being one pseudorandomness, an attacker can take advantage of the cryptographically insecure nature of this function to enumerate session tokens for accounts that are not under his/her control\n\n## 🕵️‍♂️ Proof of Concept\nNumerous examples and attack implementations can be found in this paper . If you're looking for a practical tool that can crack your mt_rand implementation's seed value, see this project and run the following commands in a console with php5 and OpenWall's tool installed:\n\n`root$ php -r 'mt_srand(13333337); echo mt_rand( ), \"\\n\";'`\nAfter that, copy the output (1863134308) and execute the following commands:\n\n`root$ gcc php_mt_seed.c -o php_mt_seedroot$ ./php_mt_seed 1863134308`\nAfter waiting ~1 minute you should have a few possible seeds corresponding to their PHP versions, next to your installed PHP version you should see something akin to:\n\nseed = 0x00cb7359 = 13333337 (PHP 7.1.0+)\nHey, that's your seed!\n\n## 💥 Impact\nAn attacker could takeover accounts at random by enumerating and using access tokens.\n\n## 📝 References\n\n- https://openwall.com/php_mt_seedhttps://crypto.di.uoa.gr/CRYPTO.SEC/Randomness_Attacks_files/paper.pdf\n- https://github.com/mautic/mautic/blob/5213e320b4ef4d0c51bb84c1d46a1071e8e4f7fc/app/bundles/PointBundle/Controller/TriggerController.php#L187\n- https://github.com/mautic/mautic/releases/tag/3.3.4\n- https://github.com/mautic/mautic/releases/tag/4.0.0","origin":"UNSPECIFIED","severity":"LOW","published_at":"2021-09-01T18:41:06.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":3.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L","references":["https://github.com/mautic/mautic/security/advisories/GHSA-x7g2-wrrp-r6h3","https://nvd.nist.gov/vuln/detail/CVE-2021-27913","https://github.com/mautic/mautic/commit/d1cad766a2de74e6c6b89d6d78c2a5f2e36ba91c","https://github.com/FriendsOfPHP/security-advisories/blob/master/mautic/core/CVE-2021-27913.yaml","https://github.com/advisories/GHSA-x7g2-wrrp-r6h3"],"source_kind":"github","identifiers":["GHSA-x7g2-wrrp-r6h3","CVE-2021-27913"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:12:48.513Z","updated_at":"2026-01-20T17:35:58.350Z","epss_percentage":0.00089,"epss_percentile":0.25809,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"4.0.0","vulnerable_version_range":"\u003e= 4.0.0-alpha1, \u003c 4.0.0"},{"first_patched_version":"3.3.4","vulnerable_version_range":"\u003c 3.3.4"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","4.0.0-alpha1","4.0.0-beta","4.0.0-rc"],"unaffected_versions":["3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTMyaHctM3B2aC12Y3Zj","url":"https://github.com/advisories/GHSA-32hw-3pvh-vcvc","title":"XSS vulnerability on password reset page","description":"### Impact\nFor Mautic versions prior to 3.3.4, there is an XSS vulnerability on Mautic's password reset page where a vulnerable parameter, \"bundle,\" in the URL could allow an attacker to execute Javascript code. The attacker would be required to convince or trick the target into clicking a password reset URL with the vulnerable parameter utilized. \n\n### Patches\n\nUpgrade to 3.3.4 or 4.0.0\n\n### Workarounds\n\nNo\n\n### References\n\nhttps://github.com/mautic/mautic/releases/tag/3.3.4\nhttps://github.com/mautic/mautic/releases/tag/4.0.0\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [security@mautic.org](mailto:security@mautic.org)\n","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-09-01T18:40:56.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","references":["https://github.com/mautic/mautic/security/advisories/GHSA-32hw-3pvh-vcvc","https://nvd.nist.gov/vuln/detail/CVE-2021-27909","https://github.com/mautic/mautic/commit/942cb6992df619fdf1c181bfad9e25d5d4178b6f","https://github.com/FriendsOfPHP/security-advisories/blob/master/mautic/core/CVE-2021-27909.yaml","https://github.com/advisories/GHSA-32hw-3pvh-vcvc"],"source_kind":"github","identifiers":["GHSA-32hw-3pvh-vcvc","CVE-2021-27909"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:12:48.503Z","updated_at":"2026-01-20T17:35:55.832Z","epss_percentage":0.18658,"epss_percentile":0.95044,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"4.0.0","vulnerable_version_range":"\u003e= 4.0.0-alpha1, \u003c 4.0.0"},{"first_patched_version":"3.3.4","vulnerable_version_range":"\u003c 3.3.4"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","4.0.0-alpha1","4.0.0-beta","4.0.0-rc"],"unaffected_versions":["3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg2cHYtOTVtai03dzVm","url":"https://github.com/advisories/GHSA-86pv-95mj-7w5f","title":"Stored XSS vulnerability on Bounce Management Callback","description":"### Impact\nInsufficient sanitization / filtering allows for arbitrary JavaScript Injection in Mautic using the bounce management callback function. The values submitted in the \"error\" and \"error_related_to\" parameters of the POST request of the bounce management callback will be permanently stored and executed once the details page of an affected lead is opened by a Mautic user.\n\nAn attacker with access to the bounce management callback function (identified with the Mailjet webhook, but it is assumed this will work uniformly across all kinds of webhooks) can inject arbitrary JavaScript Code into the \"error\" and \"error_related_to\" parameters of the POST request (POST /mailer/\u003cproduct / webhook\u003e/callback). It is noted that there is no authentication needed to access this function.\n\nThe JavaScript Code is stored permanently in the web application and executed every time an authenticated user views the details page of a single contact / lead in Mautic. This means, arbitrary code can be executed to, e.g., steal or tamper with information.\n\n### Patches\nUpgrade to 3.3.4 or 4.0.0\n\n### Workarounds\nNo\n\n### References\nhttps://github.com/mautic/mautic/releases/tag/3.3.4\nhttps://github.com/mautic/mautic/releases/tag/4.0.0\n\n### For more information\nIf you have any questions or comments about this advisory:\n\n* Email us at [security@mautic.org](mailto:security@mautic.org)\n","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-09-01T18:40:48.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.2,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-86pv-95mj-7w5f","https://nvd.nist.gov/vuln/detail/CVE-2021-27910","https://github.com/mautic/mautic/commit/e6a405975342f3cf86aa71927618d31d25135fa3","https://github.com/FriendsOfPHP/security-advisories/blob/master/mautic/core/CVE-2021-27910.yaml","https://github.com/advisories/GHSA-86pv-95mj-7w5f"],"source_kind":"github","identifiers":["GHSA-86pv-95mj-7w5f","CVE-2021-27910"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:12:48.494Z","updated_at":"2026-01-22T01:04:56.830Z","epss_percentage":0.004,"epss_percentile":0.60156,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"4.0.0","vulnerable_version_range":"\u003e= 4.0.0-alpha1, \u003c 4.0.0"},{"first_patched_version":"3.3.4","vulnerable_version_range":"\u003c 3.3.4"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","4.0.0-alpha1","4.0.0-beta","4.0.0-rc"],"unaffected_versions":["3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTcyaG0tZng3OC14d2hj","url":"https://github.com/advisories/GHSA-72hm-fx78-xwhc","title":"XSS vulnerability on contacts view","description":"### Impact\nMautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack through the contact's first or last name and triggered when viewing a contact's details page then clicking on the action drop down and hovering over the Campaigns button. Contact first and last name can be populated from different sources such as UI, API, 3rd party syncing, forms, etc. \n\n### Patches\nUpgrade to 3.3.4 or 4.0.0\n\n### Workarounds\nNo\n\n### References\nhttps://github.com/mautic/mautic/releases/tag/3.3.4\nhttps://github.com/mautic/mautic/releases/tag/4.0.0\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [security@mautic.org](mailto:security@mautic.org)\n","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-09-01T18:40:40.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.4,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","references":["https://github.com/mautic/mautic/security/advisories/GHSA-72hm-fx78-xwhc","https://nvd.nist.gov/vuln/detail/CVE-2021-27911","https://github.com/FriendsOfPHP/security-advisories/blob/master/mautic/core/CVE-2021-27911.yaml","https://github.com/advisories/GHSA-72hm-fx78-xwhc"],"source_kind":"github","identifiers":["GHSA-72hm-fx78-xwhc","CVE-2021-27911"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:12:48.484Z","updated_at":"2026-01-20T17:35:55.833Z","epss_percentage":0.00352,"epss_percentile":0.56966,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"4.0.0","vulnerable_version_range":"\u003e= 4.0.0-alpha1, \u003c 4.0.0"},{"first_patched_version":"3.3.4","vulnerable_version_range":"\u003c 3.3.4"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","4.0.0-alpha1","4.0.0-beta","4.0.0-rc"],"unaffected_versions":["3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXJoNXctODJ3aC1qaHI4","url":"https://github.com/advisories/GHSA-rh5w-82wh-jhr8","title":"XSS vulnerability on asset view","description":"### Impact\nMautic versions before 3.3.4 / 4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken image URL as a remote asset. This can only be leveraged by an authenticated user with permission to create or edit assets. \n\n### Patches\nUpgrade to 3.3.4 or 4.0.0\n\n### Workarounds\nNo\n\n### References\nhttps://github.com/mautic/mautic/releases/tag/3.3.4\nhttps://github.com/mautic/mautic/releases/tag/4.0.0\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [security@mautic.org](mailto:security@mautic.org)\n","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-09-01T18:40:31.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.1,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","references":["https://github.com/mautic/mautic/security/advisories/GHSA-rh5w-82wh-jhr8","https://nvd.nist.gov/vuln/detail/CVE-2021-27912","https://github.com/FriendsOfPHP/security-advisories/blob/master/mautic/core/CVE-2021-27912.yaml","https://github.com/advisories/GHSA-rh5w-82wh-jhr8"],"source_kind":"github","identifiers":["GHSA-rh5w-82wh-jhr8","CVE-2021-27912"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:12:48.473Z","updated_at":"2026-01-22T01:05:00.524Z","epss_percentage":0.00527,"epss_percentile":0.66458,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"4.0.0","vulnerable_version_range":"\u003e= 4.0.0-alpha1, \u003c 4.0.0"},{"first_patched_version":"3.3.4","vulnerable_version_range":"\u003c 3.3.4"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1","3.3.2","3.3.2-rc","3.3.3","3.3.3-rc","4.0.0-alpha1","4.0.0-beta","4.0.0-rc"],"unaffected_versions":["3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTRoanEtNDIycS00dnB4","url":"https://github.com/advisories/GHSA-4hjq-422q-4vpx","title":"Mautic vulnerable to secret data exfiltration via symfony parameters","description":"### Impact\nSymfony parameters (which is what Mautic transforms configuration parameters into) can be used within other Symfony parameters by design. However, this also means that an admin who is normally not privy to certain parameters, such as database credentials, could expose them by leveraging any of the free text fields in Mautic’s configuration that are used in publicly facing parts of the application.\n\nFor example,\n\n1. Go to Configuration page -\u003e Landing Page Settings -\u003e Analytics script and enter this: \u003c`script\u003e console.log(\"db password is: %mautic.db_password%\"); \u003c/script\u003e`\n2. Visit any landing page and open the JS dev console. You will see the following message with real instance db password: `db password is: \u003creal password\u003e`\n\nRisk rating: ModerateCVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L\n\n### Patches\nUpgrade to 3.3.2\n\n### Workarounds\nNo\n\n### References\nNo\n\n### For more information\nIf you have any questions or comments about this advisory:\n\n* Email us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-04-06T17:20:58.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.8,"cvss_vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L","references":["https://github.com/mautic/mautic/security/advisories/GHSA-4hjq-422q-4vpx","https://nvd.nist.gov/vuln/detail/CVE-2021-27908","https://github.com/FriendsOfPHP/security-advisories/blob/master/mautic/core/CVE-2021-27908.yaml","https://github.com/advisories/GHSA-4hjq-422q-4vpx"],"source_kind":"github","identifiers":["GHSA-4hjq-422q-4vpx","CVE-2021-27908"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:13:09.120Z","updated_at":"2026-01-20T17:35:58.367Z","epss_percentage":0.00109,"epss_percentile":0.29831,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"3.3.2","vulnerable_version_range":"\u003c 3.3.2"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","2.16.5","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3","3.2.4","3.2.5","3.2.5-rc","3.3.0","3.3.0-rc","3.3.1"],"unaffected_versions":["3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXA3djQtZ202ai1jdzlt","url":"https://github.com/advisories/GHSA-p7v4-gm6j-cw9m","title":"XSS in Mautic","description":"### Impact\nThis is a cross-site scripting vulnerability relating to creating/editing a company which requires the user to be logged in as an administrator to be executed.\n\nThis vulnerability was reported by Dardan Prebreza at Bishop Fox.\n\n### Patches\nUpgrade to 3.2.4 or 2.16.5.\n\nLink to patch for 2.x versions: https://github.com/mautic/mautic/compare/2.16.4...2.16.5.diff\n\nLink to patch for 3.x versions: https://github.com/mautic/mautic/compare/3.2.2...3.2.4.diff\n\n### Workarounds\nNone\n\n### References\nhttps://www.mautic.org/blog/community/security-release-all-versions-mautic-prior-2-16-5-and-3-2-4\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Post in https://forum.mautic.org/c/support\n* Email us at security@mautic.org","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-01-29T20:51:20.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/mautic/mautic/security/advisories/GHSA-p7v4-gm6j-cw9m","https://nvd.nist.gov/vuln/detail/CVE-2021-3142","https://github.com/mautic/mautic/commit/ba31db23e664f889da55a29ff27f797e2ab5cb1b","https://github.com/mautic/mautic/releases/tag/3.2.4","https://www.mautic.org/blog/community/security-release-all-versions-mautic-prior-2-16-5-and-3-2-3","https://github.com/FriendsOfPHP/security-advisories/blob/master/mautic/core/CVE-2021-3142.yaml","https://www.mautic.org/blog/community/security-release-all-versions-mautic-prior-2-16-5-and-3-2-4","https://github.com/advisories/GHSA-p7v4-gm6j-cw9m"],"source_kind":"github","identifiers":["GHSA-p7v4-gm6j-cw9m","CVE-2021-3142"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:13:11.794Z","updated_at":"2026-01-23T17:05:25.588Z","epss_percentage":0.00241,"epss_percentile":0.63534,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"2.16.5","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.16.5"},{"first_patched_version":"3.2.4","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.2.4"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2513,"downloads_period":"total"},"affected_versions":["2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.16.5","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTI5djktMmZweC1qNWc5","url":"https://github.com/advisories/GHSA-29v9-2fpx-j5g9","title":"CSV Injection vulnerability with exported contact lists in Mautic","description":"### Impact\nMautic versions before 2.13.0 had a vulnerability that allowed a CSV injection with exported contact lists - https://www.owasp.org/index.php/CSV_Injection.\n\n### Patches\nUpdate to 2.13.0 or later.\n\n### Workarounds\nNone.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-01-19T21:16:29.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://github.com/mautic/mautic/security/advisories/GHSA-29v9-2fpx-j5g9","https://nvd.nist.gov/vuln/detail/CVE-2018-8092","https://github.com/mautic/mautic/commit/cbc49f0ac4cc7e3acc07f2a85c079b2f85225a6b","https://github.com/mautic/mautic/releases/tag/2.13.0","https://github.com/advisories/GHSA-29v9-2fpx-j5g9"],"source_kind":"github","identifiers":["GHSA-29v9-2fpx-j5g9","CVE-2018-8092"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:13:12.059Z","updated_at":"2026-01-20T17:41:34.768Z","epss_percentage":0.00486,"epss_percentile":0.64515,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"2.13.0","vulnerable_version_range":"\u003c 2.13.0"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta"],"unaffected_versions":["2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTloeDctcmc3dy14bTc5","url":"https://github.com/advisories/GHSA-9hx7-rg7w-xm79","title":"XSS vulnerability in company name field in Mautic","description":"### Impact\nMautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code.\n\n### Patches\nUpdate to 2.14.0 or later.\n\n### Workarounds\nNone.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-01-19T21:16:26.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-9hx7-rg7w-xm79","https://nvd.nist.gov/vuln/detail/CVE-2018-11200","https://github.com/mautic/mautic/releases/tag/2.14.0","https://github.com/advisories/GHSA-9hx7-rg7w-xm79"],"source_kind":"github","identifiers":["GHSA-9hx7-rg7w-xm79","CVE-2018-11200"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:13:12.050Z","updated_at":"2026-01-20T17:41:34.767Z","epss_percentage":0.0024,"epss_percentile":0.4718,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"2.14.0","vulnerable_version_range":"\u003c 2.11.0"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1"],"unaffected_versions":["2.11.0","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFqaHItYzIzZi13NzZx","url":"https://github.com/advisories/GHSA-qjhr-c23f-w76q","title":"Inline JS XSS vulnerability in Mautic","description":"### Impact\n\nMautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate the form.\n\n### Patches\nUpgrade to 2.12.0 or later.\n\n### Workarounds\nNone\n\n### References\nhttps://github.com/mautic/mautic/releases/tag/2.12.0\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-01-19T21:16:24.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-qjhr-c23f-w76q","https://nvd.nist.gov/vuln/detail/CVE-2017-1000488","https://github.com/mautic/mautic/commit/bda60c0eefbd19c759589e975e63ab1d201c1b8e","https://github.com/mautic/mautic/releases/tag/2.12.0","https://github.com/advisories/GHSA-qjhr-c23f-w76q"],"source_kind":"github","identifiers":["GHSA-qjhr-c23f-w76q","CVE-2017-1000488"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:13:12.020Z","updated_at":"2026-01-20T17:41:34.767Z","epss_percentage":0.0024,"epss_percentile":0.4718,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"2.12.0","vulnerable_version_range":"\u003e= 2.1.0, \u003c 2.12.0"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":["2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXZmeGotcWc5My03d3dj","url":"https://github.com/advisories/GHSA-vfxj-qg93-7wwc","title":"Mautic Sessions could be hijacked due to tracking contacts by an auto-incremented ID","description":"### Impact\nAn issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each contact in Mautic. It is then possible to retrieve information about the contact through forms that have progressive profiling enabled.\n\n### Patches\nUpdate to 2.13.0 or later\n\n### Workarounds\nNone\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-01-19T21:16:21.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-vfxj-qg93-7wwc","https://nvd.nist.gov/vuln/detail/CVE-2018-10189","https://github.com/mautic/mautic/releases/tag/2.13.0","https://github.com/advisories/GHSA-vfxj-qg93-7wwc"],"source_kind":"github","identifiers":["GHSA-vfxj-qg93-7wwc","CVE-2018-10189"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:13:12.030Z","updated_at":"2026-01-20T17:37:44.423Z","epss_percentage":0.003,"epss_percentile":0.52867,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"2.13.0","vulnerable_version_range":"\u003c 2.13.0"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta"],"unaffected_versions":["2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTZ4OTgtZng5ai03Yzc4","url":"https://github.com/advisories/GHSA-6x98-fx9j-7c78","title":"Disabled users able to log in with third party SSO plugin","description":"### Impact\nMautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address\n\n### Patches\nUpgrade to 2.12.0 or later.\n\n### Workarounds\nNone.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2021-01-19T21:16:19.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://github.com/mautic/mautic/security/advisories/GHSA-6x98-fx9j-7c78","https://nvd.nist.gov/vuln/detail/CVE-2017-1000489","https://github.com/mautic/mautic/commit/fd933cbef795b04cabdc50527cb18e037488fef9","https://github.com/mautic/mautic/releases/tag/2.12.0","https://github.com/advisories/GHSA-6x98-fx9j-7c78"],"source_kind":"github","identifiers":["GHSA-6x98-fx9j-7c78","CVE-2017-1000489"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:13:12.040Z","updated_at":"2026-01-20T17:37:44.426Z","epss_percentage":0.00271,"epss_percentile":0.50481,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"2.12.0","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.12.0"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":["2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTV3NzQtang3bS14Nmh2","url":"https://github.com/advisories/GHSA-5w74-jx7m-x6hv","title":"XSS vulnerability in theme config file in Mautic","description":"### Impact\nMautic before v2.13.0 has stored XSS via a theme config file.\n\n### Patches\nUpdate to 2.13.0 or later.\n\n### Workarounds\nNone.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-01-19T21:16:17.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-5w74-jx7m-x6hv","https://nvd.nist.gov/vuln/detail/CVE-2018-8071","https://github.com/mautic/mautic/commit/3add236e9cc00ea9b211b52cccc4660379b2ee8b","https://github.com/mautic/mautic/releases/tag/2.13.0","https://github.com/advisories/GHSA-5w74-jx7m-x6hv"],"source_kind":"github","identifiers":["GHSA-5w74-jx7m-x6hv","CVE-2018-8071"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:13:12.010Z","updated_at":"2026-01-20T17:37:44.425Z","epss_percentage":0.0024,"epss_percentile":0.4718,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"2.13.0","vulnerable_version_range":"\u003c 2.13.0"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta"],"unaffected_versions":["2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXhjZjctY2o4cS1wY2pt","url":"https://github.com/advisories/GHSA-xcf7-cj8q-pcjm","title":"XSS vulnerability in Author URL of themes in Mautic","description":"### Impact\nAn XSS vulnerability was discovered in Mautic 2.13.1 in the Author URL of themes.\n\n### Patches\nUpdate to 2.14 or later\n\n### Workarounds\nNone\n\n### References\nhttps://github.com/mautic/mautic/releases/tag/2.14.0\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-01-19T21:16:14.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.1,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-xcf7-cj8q-pcjm","https://nvd.nist.gov/vuln/detail/CVE-2018-11198","https://github.com/mautic/mautic/releases","https://github.com/mautic/mautic/releases/tag/2.14.0","https://github.com/advisories/GHSA-xcf7-cj8q-pcjm"],"source_kind":"github","identifiers":["GHSA-xcf7-cj8q-pcjm","CVE-2018-11198"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:13:12.002Z","updated_at":"2026-01-20T17:37:44.426Z","epss_percentage":0.0024,"epss_percentile":0.4718,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"2.14.0","vulnerable_version_range":"= 2.13.1"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":[],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.1","2.9.2","2.10.0","2.10.1","2.11.0","2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFwZ3ctMmM3Mi00Yzg5","url":"https://github.com/advisories/GHSA-qpgw-2c72-4c89","title":"Mautic users able to download any files from server using filemanager","description":"### Impact\nMautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to.\n\n### Patches\nUpdate to 2.12.0 or later.\n\n### Workarounds\nNone\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [security@mautic.org](mailto:security@mautic.org)","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2021-01-19T20:50:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","references":["https://github.com/mautic/mautic/security/advisories/GHSA-qpgw-2c72-4c89","https://nvd.nist.gov/vuln/detail/CVE-2017-1000490","https://github.com/mautic/mautic/commit/3b01786433ae15e9a23f1eb9b0d3dfdb065b6241","https://github.com/mautic/mautic/releases/tag/2.12.0","https://github.com/advisories/GHSA-qpgw-2c72-4c89"],"source_kind":"github","identifiers":["GHSA-qpgw-2c72-4c89","CVE-2017-1000490"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:13:12.067Z","updated_at":"2026-01-20T17:37:44.426Z","epss_percentage":0.00344,"epss_percentile":0.56435,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"2.12.0","vulnerable_version_range":"\u003e= 1.0.0, \u003c 2.12.0"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2510,"downloads_period":"total"},"affected_versions":["1.0.0","1.0.0-beta","1.0.0-beta2","1.0.0-beta3","1.0.0-beta4","1.0.0-rc1","1.0.0-rc2","1.0.0-rc3","1.0.0-rc4","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.0-beta1","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta"],"unaffected_versions":["2.12.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.0","2.14.1","2.14.2","2.15.0","2.15.1","2.15.2","2.15.3","2.16.0","2.16.1","2.16.2","2.16.3","2.16.4","2.16.5","3.0.0","3.0.1","3.0.2","3.1.0","3.1.1","3.1.2","3.2.0","3.2.1","3.2.2","3.2.3","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7"]}],"related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM5d2otajNqYy04NTht","url":"https://github.com/advisories/GHSA-39wj-j3jc-858m","title":"XSS vulnerability leveraged through referrers could allow un-authorized admin access in Mautic","description":"### Impact\nThis is a cross-site scripting vulnerability which affects every version of Mautic and could allow an attacker unauthorised administrator level access to Mautic.\n\nThis vulnerability was reported by Naveen Sunkavally at Horizon3.ai.\n\n### Patches\nUpgrade to 3.2.4 or 2.16.5.\n\nLink to patch for 2.x versions: https://github.com/mautic/mautic/compare/2.16.4...2.16.5.diff\n\nLink to patch for 3.x versions: https://github.com/mautic/mautic/compare/3.2.2...3.2.4.diff\n\n### Workarounds\nNone\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Post in https://forum.mautic.org/c/support\n* Email us at security@mautic.org","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2021-01-19T20:43:56.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/mautic/mautic/security/advisories/GHSA-39wj-j3jc-858m","https://github.com/mautic/mautic/commit/20c5dc39b62164f6922ce53ea42cbb4ccec64e57","https://packagist.org/packages/mautic/core","https://www.mautic.org/blog/community/security-release-all-versions-mautic-prior-2-16-5-and-3-2-4","https://nvd.nist.gov/vuln/detail/CVE-2020-35124","https://forum.mautic.org/c/announcements/16","https://www.horizon3.ai/disclosures/mautic-unauth-xss-to-rce","https://github.com/FriendsOfPHP/security-advisories/blob/master/mautic/core/CVE-2020-35124.yaml","https://github.com/advisories/GHSA-39wj-j3jc-858m"],"source_kind":"github","identifiers":["GHSA-39wj-j3jc-858m","CVE-2020-35124"],"repository_url":"https://github.com/mautic/mautic","blast_radius":0.0,"created_at":"2022-12-21T16:13:12.076Z","updated_at":"2026-01-21T15:05:29.202Z","epss_percentage":0.01142,"epss_percentile":0.77815,"packages":[{"ecosystem":"packagist","package_name":"mautic/core","versions":[{"first_patched_version":"2.16.5","vulnerable_version_range":"\u003e= 2.0.0, \u003c 2.16.5"},{"first_patched_version":"3.2.4","vulnerable_version_range":"\u003e= 3.0.0, \u003c 3.2.4"}],"purl":null,"statistics":{"dependent_packages_count":2,"dependent_repos_count":3,"downloads":2512,"downloads_period":"total"},"affected_versions":["2.0.0","2.0.1","2.1.0","2.1.1","2.2.0","2.2.1","2.3.0","2.4.0","2.5.0","2.5.1","2.6.0","2.6.1","2.7.0","2.7.1","2.8.0","2.8.1","2.8.2","2.9.0","2.9.0-beta","2.9.1","2.9.2","2.10.0","2.10.0-beta","2.10.1","2.11.0","2.11.0-beta","2.12.0","2.12.0-beta","2.12.1","2.12.1-beta","2.12.2","2.12.2-beta","2.13.0","2.13.0-beta","2.13.1","2.14.0","2.14.0-beta","2.14.1","2.14.1-beta","2.14.2","2.14.2-beta","2.15.0","2.15.0-beta","2.15.1","2.15.1-beta","2.15.2","2.15.2-beta","2.15.3","2.15.3-beta","2.16.0","2.16.0-beta","2.16.1","2.16.1-beta","2.16.2","2.16.2-beta","2.16.3","2.16.3-beta","2.16.4","3.0.0","3.0.0-alpha","3.0.0-beta","3.0.0-beta2","3.0.1","3.0.2","3.0.2-rc","3.1.0","3.1.0-rc","3.1.1","3.1.1-rc","3.1.2","3.1.2-rc","3.2.0","3.2.0-rc","3.2.1","3.2.2","3.2.2-rc","3.2.3"],"unaffected_versions":["1.0.0","1.0.1","1.0.2","1.0.3","1.0.4","1.0.5","1.1.0","1.1.1","1.1.2","1.1.3","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.3.0","1.3.1","1.4.0","1.4.1","2.16.5","3.2.4","3.2.5","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","4.0.0","4.0.1","4.0.2","4.1.0","4.1.1","4.1.2","4.2.0","4.2.1","4.2.2","4.3.0","4.3.1","4.4.0","4.4.1","4.4.2","4.4.3","4.4.4","4.4.5","4.4.6","4.4.7","4.4.8","4.4.9","4.4.10","4.4.11","4.4.12","4.4.13","5.0.0","5.0.1","5.0.2","5.0.3","5.0.4","5.1.0","5.1.1","5.2.0","5.2.1","5.2.2","5.2.3","5.2.4","5.2.5","5.2.6","5.2.7","5.2.8","5.2.9","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.0.6","6.0.7","7.0.0"]}],"related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/packagist/mautic/core","docker_dependents_count":3,"docker_downloads_count":84,"usage_url":"https://repos.ecosyste.ms/usage/packagist/mautic/core","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/packagist/mautic/core/dependencies","status":null,"funding_links":["https://github.com/sponsors/mautic","https://www.opencollective.com/mautic","https://opencollective.com/mautic"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-31T12:00:18.356Z","issues_count":1176,"pull_requests_count":4552,"avg_time_to_close_issue":18224200.290076334,"avg_time_to_close_pull_request":10098971.009817671,"issues_closed_count":785,"pull_requests_closed_count":3555,"pull_request_authors_count":243,"issue_authors_count":487,"avg_comments_per_issue":4.043367346938775,"avg_comments_per_pull_request":3.259226713532513,"merged_pull_requests_count":2604,"bot_issues_count":1,"bot_pull_requests_count":304,"past_year_issues_count":93,"past_year_pull_requests_count":665,"past_year_avg_time_to_close_issue":6744993.826086956,"past_year_avg_time_to_close_pull_request":766104.2211981567,"past_year_issues_closed_count":46,"past_year_pull_requests_closed_count":434,"past_year_pull_request_authors_count":83,"past_year_issue_authors_count":58,"past_year_avg_comments_per_issue":2.4838709677419355,"past_year_avg_comments_per_pull_request":3.237593984962406,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":48,"past_year_merged_pull_requests_count":315,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/mautic%2Fmautic/issues","maintainers":[{"login":"escopecz","count":431,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/escopecz"},{"login":"kuzmany","count":388,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kuzmany"},{"login":"patrykgruszka","count":185,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/patrykgruszka"},{"login":"RCheesley","count":179,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/RCheesley"},{"login":"fedys","count":69,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/fedys"},{"login":"mabumusa1","count":48,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mabumusa1"},{"login":"npracht","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/npracht"},{"login":"annamunk","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/annamunk"},{"login":"abhisekmazumdar","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/abhisekmazumdar"},{"login":"hluchas","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hluchas"},{"login":"laurielim","count":13,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/laurielim"},{"login":"nox1134","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nox1134"},{"login":"dongilbert","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dongilbert"},{"login":"dennisameling","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dennisameling"},{"login":"vukovicpredrag","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vukovicpredrag"},{"login":"luizeof","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/luizeof"},{"login":"tuannvtiki","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tuannvtiki"},{"login":"kanapatrick","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kanapatrick"},{"login":"zietbukuel","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zietbukuel"},{"login":"leandrohstein","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"}],"active_maintainers":[{"login":"patrykgruszka","count":32,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/patrykgruszka"},{"login":"escopecz","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/escopecz"},{"login":"hluchas","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hluchas"},{"login":"fedys","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/fedys"},{"login":"kuzmany","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kuzmany"},{"login":"RCheesley","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/RCheesley"},{"login":"vukovicpredrag","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vukovicpredrag"},{"login":"dongilbert","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dongilbert"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/packages/mautic%2Fcore/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/packages/mautic%2Fcore/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/packages/mautic%2Fcore/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/packages/mautic%2Fcore/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/packages/mautic%2Fcore/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/packages/mautic%2Fcore/codemeta","maintainers":[{"uuid":"acquia","login":"acquia","name":null,"email":null,"url":null,"packages_count":80,"html_url":"https://packagist.org/users/acquia","role":null,"created_at":"2022-11-12T09:22:18.559Z","updated_at":"2022-11-12T09:22:18.559Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/maintainers/acquia/packages"},{"uuid":"rcheesley","login":"rcheesley","name":null,"email":null,"url":null,"packages_count":73,"html_url":"https://packagist.org/users/rcheesley","role":null,"created_at":"2022-11-12T09:22:18.443Z","updated_at":"2022-11-12T09:22:18.443Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/maintainers/rcheesley/packages"},{"uuid":"dongilbert","login":"dongilbert","name":null,"email":null,"url":null,"packages_count":48,"html_url":"https://packagist.org/users/dongilbert","role":null,"created_at":"2022-11-12T09:22:18.237Z","updated_at":"2022-11-12T09:22:18.237Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/maintainers/dongilbert/packages"},{"uuid":"nickveenhof","login":"nickveenhof","name":null,"email":null,"url":null,"packages_count":30,"html_url":"https://packagist.org/users/nickveenhof","role":null,"created_at":"2022-11-12T09:22:18.367Z","updated_at":"2022-11-12T09:22:18.367Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/packagist.org/maintainers/nickveenhof/packages"}]}