All vulnerabilities

Servers and applications

GHSA-jh5q-3472-hwjp

Impersonation could be started when disabled via configuration

Severity
Medium 6.5
Published
6 Oct 2026
Last changed
6 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
5.74.5
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
StatamicServers and applications · github:statamic/cms
  • Every version before 5.74.5

References