CVE-2026-113658

ApostropheCMS , an open-source Node.js content management system, contains a vulnerability where the unauthenticated Rich Text CSV conversion route fails to clean up staged files. The system writes multipart uploads to the temporary directory before validating the file extension; if validation fa...