Partial String Comparison

Overview Affected versions of this package are vulnerable to Partial String Comparison via the isPublicAdminRoute utility in packages/next/src/utilities/isPublicAdminRoute.ts, which incorrectly marks any route containing the substring /verify/ as a public admin route, regardless of whether it...

@adenta/cms (>=0.0.6, <=1.1.1-0), @contentql/core (>=0.1.2, <=0.3.5) +22 more potentially affected by CVE-2026-105858 via @payloadcms/next (>=3.0.0-beta.48, <=3.89.0)

@payloadcms/next NPM version =3.0.0-beta.48, =0.0.6, =0.1.2, =0.2.2, =0.14.0, =0.1.2, =1.0.2, =0.1.0, =3.2.0, =0.2.0, =1.0.54, =0.1.0, =0.1.4, =1.0.0, =1.0.2 and more Source cves: CVE-2026-105858 Source advisory: SNYK:JS-PAYLOADCMSNEXT-20571239...

@payloadcms/plugin-search (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105858 via @payloadcms/next (>=4.0.0-canary.0, <=4.0.0-canary.33)

@payloadcms/next NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105858 Source advisory: SNYK:JS-PAYLOADCMSNEXT-20571239...

Overly Restrictive Account Lockout Mechanism

Overview Affected versions of this package are vulnerable to Overly Restrictive Account Lockout Mechanism via the resetPassword operation, which fails to reset the account lockout state upon a successful password reset. An attacker who triggers repeated failed login attempts to lock an account ca...

@adenta/cms (>=0.0.6, <=1.1.1-0), @contentql/core (>=0.1.2, <=0.3.5) +22 more potentially affected by CVE-2026-105866 via @payloadcms/next (>=3.0.0-beta.48, <=3.89.0)

@payloadcms/next NPM version =3.0.0-beta.48, =0.0.6, =0.1.2, =0.2.2, =0.14.0, =0.1.2, =1.0.2, =0.1.0, =3.2.0, =0.2.0, =1.0.54, =0.1.0, =0.1.4, =1.0.0, =1.0.2 and more Source cves: CVE-2026-105866 Source advisory: SNYK:JS-PAYLOADCMSNEXT-20570506...

@payloadcms/plugin-search (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105866 via @payloadcms/next (>=4.0.0-canary.0, <=4.0.0-canary.33)

@payloadcms/next NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105866 Source advisory: SNYK:JS-PAYLOADCMSNEXT-20570506...

@payloadcms/next (>=4.0.0-canary.1, <=4.0.0-canary.33), @payloadcms/plugin-cloud-storage (>=4.0.0-canary.1, <=4.0.0-canary.33) +19 more potentially affected by CVE-2026-105858 via @payloadcms/ui (>=4.0.0-canary.1, <=4.0.0-canary.33)

@payloadcms/ui NPM version =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1, =4.0.0-canary.1...

@adenta/cms (>=0.0.6, <=1.1.1-0), @frogbotai/next (>=0.2.2, <=0.23.0) +18 more potentially affected by CVE-2026-105858 via @payloadcms/next (>=3.0.1, <=3.89.0)

@payloadcms/next NPM version =3.0.1, =0.0.6, =0.2.2, =0.14.0, =0.1.2, =1.0.2, =0.1.0, =3.2.0, =0.2.0, =1.0.54, =1.0.0, =1.0.2 - kollab-payload-template 1.0.0 - payload-appointments-plugin 3.0.0 - payload-cms-template-tailwind 1.0.0 and more Source cves: CVE-2026-105858 Source advisory:...

@payloadcms/next (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/plugin-cloud-storage (>=4.0.0-canary.0, <=4.0.0-canary.33) +19 more potentially affected by CVE-2026-105849 via @payloadcms/ui (>=4.0.0-canary.0, <=4.0.0-canary.33)

@payloadcms/ui NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.1, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0...

Open Redirect

Overview Affected versions of this package are vulnerable to Open Redirect through the getSafeRedirect utility in packages/payload/src/utilities/getSafeRedirect.ts and the authentication forms in examples/auth/src/app/app/login/LoginForm/index.tsx and...

@adenta/cms (>=0.0.6, <=1.1.1-0), @frogbotai/next (>=0.2.2, <=0.21.0) +14 more potentially affected by CVE-2026-105846 via @payloadcms/next (>=3.31.0, <=3.87.1)

@payloadcms/next NPM version =3.31.0, =0.0.6, =0.2.2, =0.14.0, =0.1.2, =1.0.2, =3.31.0, =1.0.54, =1.0.0, =1.0.0, =1.53.40, =1.53.45 and more Source cves: CVE-2026-105846 Source advisory: OSV:GHSA-W84C-53H3-MC2G...

@adenta/cms (>=0.0.6, <=1.1.1-0), @frogbotai/next (>=0.2.2, <=0.21.0) +14 more potentially affected by CVE-2026-105846 via @payloadcms/next (>=3.31.0, <=3.87.1)

@payloadcms/next NPM version =3.31.0, =0.0.6, =0.2.2, =0.14.0, =0.1.2, =1.0.2, =3.31.0, =1.0.54, =1.0.0, =1.0.0, =1.53.40, =1.53.45 and more Source cves: CVE-2026-105846 Source advisory: GHSA-W84C-53H3-MC2G...

@adenta/cms (>=0.0.6, <=1.1.1-0), @frogbotai/next (>=0.2.2, <=0.21.0) +14 more potentially affected by CVE-2026-105846 via @payloadcms/next (>=3.31.0, <=3.87.1)

@payloadcms/next NPM version =3.31.0, =0.0.6, =0.2.2, =0.14.0, =0.1.2, =1.0.2, =3.31.0, =1.0.54, =1.0.0, =1.0.0, =1.53.40, =1.53.45 and more Source cves: CVE-2026-105846 Source advisory: SNYK:JS-PAYLOADCMSNEXT-20571761...

@payloadcms/plugin-search (>=4.0.0-canary.0, <=4.0.0-canary.26) potentially affected by CVE-2026-105846 via @payloadcms/next (>=4.0.0-canary.0, <=4.0.0-canary.26)

@payloadcms/next NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.26 Source cves: CVE-2026-105846 Source advisory: OSV:GHSA-W84C-53H3-MC2G...

@payloadcms/plugin-search (>=4.0.0-canary.0, <=4.0.0-canary.26) potentially affected by CVE-2026-105846 via @payloadcms/next (>=4.0.0-canary.0, <=4.0.0-canary.26)

@payloadcms/next NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.26 Source cves: CVE-2026-105846 Source advisory: GHSA-W84C-53H3-MC2G...

@payloadcms/plugin-search (>=4.0.0-canary.0, <=4.0.0-canary.26) potentially affected by CVE-2026-105846 via @payloadcms/next (>=4.0.0-canary.0, <=4.0.0-canary.26)

@payloadcms/next NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.26 Source cves: CVE-2026-105846 Source advisory: SNYK:JS-PAYLOADCMSNEXT-20571761...

@adenta/cms (>=0.0.6, <=1.1.1-0), @frogbotai/next (>=0.2.2, <=0.21.0) +14 more potentially affected by CVE-2026-105846 via @payloadcms/next (>=3.31.0, <=3.87.1)

@payloadcms/next NPM version =3.31.0, =0.0.6, =0.2.2, =0.14.0, =0.1.2, =1.0.2, =3.31.0, =1.0.54, =1.0.0, =1.0.0, =1.53.40, =1.53.45 and more Source cves: CVE-2026-105846 Source advisory: MEND:CVE-2026-105846...

@payloadcms/plugin-search (>=4.0.0-canary.0, <=4.0.0-canary.26) potentially affected by CVE-2026-105846 via @payloadcms/next (>=4.0.0-canary.0, <=4.0.0-canary.26)

@payloadcms/next NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.26 Source cves: CVE-2026-105846 Source advisory: MEND:CVE-2026-105846...

@adenta/cms (>=0.0.6, <=1.1.1-0), @contentql/core (>=0.1.2, <=0.3.5) +15 more potentially affected by CVE-2026-34748 via @payloadcms/next (>=3.0.0-beta.48, <=3.78.0-internal.ab11ffa)

@payloadcms/next NPM version =3.0.0-beta.48, =0.0.6, =0.1.2, =1.0.2, =0.1.0, =3.2.0, =0.2.0, =1.0.54, =0.1.0, =0.1.4, =1.0.0, =3.0.0-beta.3, =1.53.40, =0.0.3, =1.0.0 and more Source cves: CVE-2026-34748 Source advisory: OSV:GHSA-MMXC-95CH-2J7C...

@adenta/cms (>=0.0.6, <=1.1.1-0), @contentql/core (>=0.1.2, <=0.3.5) +15 more potentially affected by CVE-2026-34748 via @payloadcms/next (>=3.0.0-beta.48, <=3.78.0-internal.ab11ffa)

@payloadcms/next NPM version =3.0.0-beta.48, =0.0.6, =0.1.2, =1.0.2, =0.1.0, =3.2.0, =0.2.0, =1.0.54, =0.1.0, =0.1.4, =1.0.0, =3.0.0-beta.3, =1.53.40, =0.0.3, =1.0.0 and more Source cves: CVE-2026-34748 Source advisory: GHSA-MMXC-95CH-2J7C...