I’ve updated my project with Umbraco 13.13, and it appears that there is still a known vulnerability present in this version. I wanted to bring this to your attention and inquire about the planned release date for the fix. Could you please provide an update on when we can expect a security patch or…

It probably won’t, please read: [image] CVE-2025-67288 and v13? speech_balloonQuestions Just to walk this CVE back a bit… It’s an attention grabbing PoC Upload a crafted PDF file containing embedded JavaScript. Observe that JavaScript from the PDF executes…

I’ve added a bit more detail and an example IFileStreamSecurityAnalyzer for scanning PDFs in an article here: [image] Mitigating CVE-2025-67288 in Umbraco 13 (if you feel you need to) Firstly, this is a really ill-informed CVE. If you've not read my comment on the Umbraco Forum, I'll... …

Vulnerability in Umbraco 13.13 - When Will the Fix Be Released?

Questions

Luuk (Luuk Peters (Proud Nerds)) February 2, 2026, 6:41am 2

It probably won’t, please read:

1 Like