CVE-2026-112956

ApostropheCMS, an open-source Node.js content management system, contains an incorrect authorization vulnerability (CWE-863) in the import-export module prior to version 3.7.1 . The duplicate-import continuation fails to bind client-controlled replacement choices to a server-side analysis or auth...

CVE-2026-112955 ApostropheCMS: Import archives can exhaust server storage and deny service

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, an authenticated importer can submit archives whose decompressed bytes, entry count, and entry sizes are not bounded before document-type authorization, and extraction or parsing failure...

CVE-2026-112955 ApostropheCMS: Import archives can exhaust server storage and deny service

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, an authenticated importer can submit archives whose decompressed bytes, entry count, and entry sizes are not bounded before document-type authorization, and extraction or parsing failure...

CVE-2026-112955

The ApostropheCMS Node.js content management system is vulnerable to a denial-of-service (DoS) condition in the import-export module prior to version 3.7.1 . An authenticated importer can submit archives with unbounded decompressed bytes, entry counts, and entry sizes. Because these values are no...

CVE-2026-112955

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, an authenticated importer can submit archives whose decompressed bytes, entry count, and entry sizes are not bounded before document-type authorization, and extraction or parsing failure...

CVE-2026-112954

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses publicApiProjection can expose excluded searchable or sortable field information through search membership and sort ordering oracles. Returned fields remain filtered by the...

CVE-2026-112954

The ApostropheCMS Node.js content management system (versions prior to 4.34.0 ) contains a vulnerability in the public REST API. A public REST API type utilizing publicApiProjection can be exploited via search membership and sort ordering oracles to bypass projection restrictions. This allows an ...

CVE-2026-112954 ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses publicApiProjection can expose excluded searchable or sortable field information through search membership and sort ordering oracles. Returned fields remain filtered by the...

CVE-2026-112954 ApostropheCMS: Unauthenticated publicApiProjection bypass via search and sort query builders in the public REST API

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses publicApiProjection can expose excluded searchable or sortable field information through search membership and sort ordering oracles. Returned fields remain filtered by the...

CVE-2026-112953

The ApostropheCMS content management system is vulnerable to an information exposure flaw in the import-export module prior to version 3.7.1 . The root cause is the use of predictable export archive filenames , which allows an unauthenticated requester to download another user's export from publi...

CVE-2026-112953 ApostropheCMS: Exposure of Sensitive Information via predictable export filenames

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictable export archive filenames allow an unauthenticated requester to download another user's export from publicly readable export storage before the archive expires or is removed. ...

CVE-2026-112953 ApostropheCMS: Exposure of Sensitive Information via predictable export filenames

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictable export archive filenames allow an unauthenticated requester to download another user's export from publicly readable export storage before the archive expires or is removed. ...

CVE-2026-112953 ApostropheCMS: Exposure of Sensitive Information via predictable export filenames

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictable export archive filenames allow an unauthenticated requester to download another user's export from publicly readable export storage before the archive expires or is removed. ...

CVE-2026-112953

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictable export archive filenames allow an unauthenticated requester to download another user's export from publicly readable export storage before the archive expires or is removed. ...

CVE-2026-112952 ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, 'POST /api/v1/@apostrophecms/doc/slugTaken' with body "slug": "target-slug" returns a boolean indicating whether a slug is in use across all document types and visibility levels, with no permission or type filter...

CVE-2026-112952 ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, 'POST /api/v1/@apostrophecms/doc/slugTaken' with body "slug": "target-slug" returns a boolean indicating whether a slug is in use across all document types and visibility levels, with no permission or type filter...

CVE-2026-112952 ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, 'POST /api/v1/@apostrophecms/doc/slugTaken' with body "slug": "target-slug" returns a boolean indicating whether a slug is in use across all document types and visibility levels, with no permission or type filter...

CVE-2026-112952

ApostropheCMS , an open-source Node.js content management system, contains a vulnerability prior to version 4.34.0 where the POST /api/v1/@apostrophecms/doc/slugTaken endpoint lacks proper permission or type filters. This allows any authenticated user, including those with lower privileges like e...

CVE-2026-112952

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, 'POST /api/v1/@apostrophecms/doc/slugTaken' with body "slug": "target-slug" returns a boolean indicating whether a slug is in use across all document types and visibility levels, with no permission or type filter...

CVE-2026-112951 ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix

ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing content after a valid rgb or hsl prefix because its TinyColor validation does not require the entire value to match a color. An authenticated user with edit rights can store...