466 matches found
NPM: ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API
NPM: ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API vulnerability discovered by ? in WordPress Npm apostrophe versions 4.34.0...
EUVD-2026-105154
ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb/hsl prefix...
GHSA-VMGJ-9CWM-CF3H ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix
Summary The color field accepts any string that begins with a valid rgb / hsl color, because TinyColor.isValid does not anchor its match at the end of the string. An authenticated user with edit rights can store arbitrary HTML after a valid color prefix. When the stored value is rendered , the...
ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix
Summary The color field accepts any string that begins with a valid rgb / hsl color, because TinyColor.isValid does not anchor its match at the end of the string. An authenticated user with edit rights can store arbitrary HTML after a valid color prefix. When the stored value is rendered , the...
NPM: ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix
NPM: ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb/hsl prefix vulnerability discovered by ? in WordPress Npm apostrophe versions 4.34.0...
GHSA-C9RX-X947-FP3H ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced)
Summary Since 2.18.0, when an is not allowed and disallowedTagsMode is 'discard' the defaults, its raw-text content is re-sanitized by a recursive call to sanitizeHtmltext, options the change from 5564, fixing 5550. The recursion has no bound and starts each nested call with a fresh state. Two...
ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced)
Summary Since 2.18.0, when an is not allowed and disallowedTagsMode is 'discard' the defaults, its raw-text content is re-sanitized by a recursive call to sanitizeHtmltext, options the change from 5564, fixing 5550. The recursion has no bound and starts each nested call with a fresh state. Two...
EUVD-2026-105176
ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe stack overflow, nestingLimit not enforced...
NPM: ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe (stack overflow, nestingLimit not enforced)
NPM: ApostropheCMS sanitize-html: unbounded recursion when re-sanitizing the fallback of a discarded iframe stack overflow, nestingLimit not enforced vulnerability discovered by ? in WordPress Npm sanitize-html versions = 2.18.0, 2.18.1...
ApostropheCMS: Import API bypasses publication roles for protected content
Review scope and evidence limits Package: @apostrophecms/import-export, version 3.7.0. Release tag reviewed: @apostrophecms/[email protected], commit 9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce September 30, 2026. Current main reviewed: 5ce3732be0ebdebb4db0f8ef160c81e8671157e6. The importer, gzip...
EUVD-2026-105184
ApostropheCMS: Import API bypasses publication roles for protected content...
GHSA-5M22-7PFQ-VP65 ApostropheCMS: Import API bypasses publication roles for protected content
Review scope and evidence limits Package: @apostrophecms/import-export, version 3.7.0. Release tag reviewed: @apostrophecms/[email protected], commit 9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce September 30, 2026. Current main reviewed: 5ce3732be0ebdebb4db0f8ef160c81e8671157e6. The importer, gzip...
NPM: ApostropheCMS: Import API bypasses publication roles for protected content
NPM: ApostropheCMS: Import API bypasses publication roles for protected content vulnerability discovered by ? in WordPress Npm apostrophe versions 4.34.0...
ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content
Review scope and evidence limits Package: @apostrophecms/import-export, version 3.7.0. Release tag reviewed: @apostrophecms/[email protected], commit 9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce September 30, 2026. Current main reviewed: 5ce3732be0ebdebb4db0f8ef160c81e8671157e6. The importer, gzip...
EUVD-2026-105107
ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content...
GHSA-JF5H-36MG-RP6X ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content
Review scope and evidence limits Package: @apostrophecms/import-export, version 3.7.0. Release tag reviewed: @apostrophecms/[email protected], commit 9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce September 30, 2026. Current main reviewed: 5ce3732be0ebdebb4db0f8ef160c81e8671157e6. The importer, gzip...
GHSA-9G7P-M758-RP72 ApostropheCMS: Import archives can exhaust server storage and deny service
Review scope and evidence limits Package: @apostrophecms/import-export, version 3.7.0. Release tag reviewed: @apostrophecms/[email protected], commit 9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce September 30, 2026. Current main reviewed: 5ce3732be0ebdebb4db0f8ef160c81e8671157e6. The importer, gzip...
EUVD-2026-105105
ApostropheCMS: Import archives can exhaust server storage and deny service...
ApostropheCMS: Import archives can exhaust server storage and deny service
Review scope and evidence limits Package: @apostrophecms/import-export, version 3.7.0. Release tag reviewed: @apostrophecms/[email protected], commit 9500b8b0e1d630d5e07fbb5fd2c25ed0943845ce September 30, 2026. Current main reviewed: 5ce3732be0ebdebb4db0f8ef160c81e8671157e6. The importer, gzip...