Pimcore

Data Warehouses & Analytics

Open‑source Data & Experience Management platform for PIM, MDM, CDP, DAM, DXP/CMS and digital commerce

PHP Latest v2026.1.4 · 7d ago Security brief →

Features

Unified data modelling with UI design via a graphical class editor
Flexible framework built on Symfony for extensibility and reuse
Integrated Digital Asset Management (DAM) with preview, meta‑data and facial recognition
DXP/CMS capabilities including multilingual sites, Twig templating and web‑to‑print

View all 16 releases →

Review required

v2026.1.4 Security relevant 7d

Auth

Class definition security enhancement

Open

Review required

v12.3.8 Security relevant 7d

Class definition security

Open

Review required

v2026.1.3 Security relevant 15d

Auth RBAC

Permission check + unserializer hardening

Open

Review required

v12.3.7 Security relevant 15d

Auth RBAC

Unserializer hardening + permission check

Open

v2026.1.2 Bug fix 29d

Security fixes

Full changelog

[Bug, EC] PEES-1067: Adjust log entry DateTime extraction by @jcPimcore in https://github.com/pimcore/pimcore/pull/19091
[Security]: Enhance SQL security in Custom Report by @kingjia90 in https://github.com/pimcore/pimcore/pull/19098
Fix Gotenberg document conversion failing for assets stored on S3 by @vrobert78 in https://github.com/pimcore/pimcore/pull/18899
[Security] Enhance Custom Report controller actions by @kingjia90 in https://github.com/pimcore/pimcore/pull/19099
Save generated object brick container class in PIMCORE_CLASS_DIRECTORY, not PIMCORE_CLASS_DEFINITION_DIRECTORY by @Jan-Walther-Basilicom in https://github.com/pimcore/pimcore/pull/18959
[Bug]: Add missing NO_AUTO_CACHE_CONTROL_HEADER for existing thumbnails by @vrobert78 in https://github.com/pimcore/pimcore/pull/19061
[Bug, EC] PEES-1103: Revert by @jcPimcore in https://github.com/pimcore/pimcore/pull/19104

@vrobert78 made their first contribution in https://github.com/pimcore/pimcore/pull/18899
@Jan-Walther-Basilicom made their first contribution in https://github.com/pimcore/pimcore/pull/18959

Full Changelog: https://github.com/pimcore/pimcore/compare/v2026.1.1...v2026.1.2

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.