← Back to CVE search

CVE-2026-39552

Blueprint

Description

Improper Control of Filename for Include/Require Statement in PHP Program (-PHP Remote File Inclusion-) vulnerability in Code Supply Co. Blueprint allows PHP Local File Inclusion. This issue affects Blueprint: from n/a before 1.1.5.

CVSS 8.1EPSS 0.334%Risk 0.83
View source
Published
2026-06-02 14:16:52
Affected versions
<1.1.5
Type
Package
Last modified
2026-07-22 19:10:00
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H