[MEDIUM] Flarum Vulnerable to Session Hijacking via Authoritative Subdomain Cookie Overwrite

PKSA-p7h1-3152-gpfx CVE-2025-27794 GHSA-hg9j-64wp-m9px

Affected version: <1.8.10

Reported by:
GitHub

[MEDIUM] Flarum's logout Route allows open redirects

PKSA-8vds-sy58-91p8 CVE-2024-21641 GHSA-733r-8xcp-w9mr

Affected version: <1.8.5

Reported by:
GitHub