@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +35 more potentially affected by CVE-2026-105863 via payload (>=3.0.1, <=3.89.0)

payload NPM version =3.0.1, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.0.25, =1.0.1-beta.0, =0.21.0, =0.14.0, =0.21.0, =0.21.0, =1.0.0, =0.1.0, =3.1.0-types, =3.1.0 - @otherdev-software/canvas 1.0.0 and more Source cves: CVE-2026-105863 Source advisory: GHSA-66WR-7VMR-P5JQ...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105863 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105863 Source advisory: SNYK:JS-PAYLOAD-20570529...

CVE-2026-105863

creationtimestamp| type| source ---|---|--- 2026-10-06 18:08:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mx7zlzpe2x27 2026-10-07 09:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mxbo72ux7v2w...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +35 more potentially affected by CVE-2026-105863 via payload (>=3.0.1, <=3.89.0)

payload NPM version =3.0.1, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.0.25, =1.0.1-beta.0, =0.21.0, =0.14.0, =0.21.0, =0.21.0, =1.0.0, =0.1.0, =3.1.0-types, =3.1.0 - @otherdev-software/canvas 1.0.0 and more Source cves: CVE-2026-105863 Source advisory: MEND:CVE-2026-105863...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105863 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105863 Source advisory: MEND:CVE-2026-105863...