Vulnerability Database · Packagist · Package report
icecoder/icecoder: vulnerability history, versions and safety
icecoder/icecoder is a package in the Packagist ecosystem. Vulert records 7 vulnerabilities for it across 2 releases, from Sep 2021 to Jul 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.
No patched version yet — these are the ones to plan around.
See the unfixed vulnerabilities →No published version shipped hostile code.
Vulert verdict on icecoder/icecoder i
Updated on 22 Oct 2026
Careful: 6 of the 7 vulnerabilities Vulert records for this package have no fix yet. Plan around those, or apply the workaround listed for each. The rest have a fixed version to move to.
What to do: Plan around the 6 vulnerabilities with no published fix: each lists the affected range and any workaround that reduces exposure. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →
- Vulnerabilities on record 7 over 2 years · 0 in the last year i
- Latest disclosure 26 Jul 2024 i
- Highest CVSS 7.5 i
- With no published fix 6 i
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert holds for icecoder/icecoder, newest first, with the vulnerabilities that name it. A version with a count of zero has no recorded vulnerabilities; open a version to see the vulnerabilities it is exposed to.
Newest 2 of 2 versions on record. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 7 were recorded in the last 12 months.
03 Vulnerabilities
Recorded vulnerabilities for icecoder/icecoder
| Vulnerability | Severity | Fixed version ↓ | Disclosed ↓ |
|---|---|---|---|
| CVE-2022-34026: ICEcoder Path Traversal Vulnerability | 7.5 high | No fix published | 23 Sep 2022 |
| CVE-2024-41373: ICEcoder Path Traversal vulnerability | 6.3 medium | No fix published | 26 Jul 2024 |
| CVE-2024-41374: ICEcoder Cross Site Scripting Vulnerability | 6.1 high | No fix published | 26 Jul 2024 |
| CVE-2024-41375: ICEcoder Cross Site Scripting Vulnerability | 6.1 high | No fix published | 26 Jul 2024 |
| CVE-2021-38623: Improper Resource Shutdown or Release in TYPO3 extension | 5.4 medium | No fix published | 21 Jan 2022 |
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 22/Oct/2026 · Vulnerabilities in our DB: 524173