CVE-2026-22599

creationtimestamp| type| source ---|---|--- 2026-09-26 15:00:07+00:00| seen| Telegram/ZwzTOKK99bJ7BFqHmsNQhcBtNpWeVQ50id2s1j08rwHDfjQ 2026-09-26 15:00:07+00:00| published-proof-of-concept| Telegram/ZwzTOKK99bJ7BFqHmsNQhcBtNpWeVQ50id2s1j08rwHDfjQ...

@avorati/strapi-plugin-preview (1.0.1), @catchmexz/fedin-cms (>=5.30.1, <=5.30.2) +9 more potentially affected by CVE-2026-22599 via @strapi/content-type-builder (>=5.0.0, <=5.33.1)

@strapi/content-type-builder NPM version =5.0.0, =5.30.1, =2.0.0, =2.0.0, =5.0.0-beta.6, =3.0.0-beta.1, =3.0.0-beta.2 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2026-22599 Source advisory: SNYK:JS-STRAPICONTENTTYPEBUILDER-16686876...

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (>=0.1.0, <=0.1.1) +94 more potentially affected by CVE-2026-22599 via @strapi/plugin-content-type-builder (>=4.0.0, <=4.26.0)

@strapi/plugin-content-type-builder NPM version =4.0.0, =0.1.0, =4.12.2, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.1 - @cowprotocol/cms 0.1.0-rc.5 and more Source cves: CVE-2026-22599 Source advisory: OSV:GHSA-3XCQ-8MJW-H6MX...

@antgineering-studio/strapi (4.5.5), @beardeddudes/strapi-types (>=0.1.0, <=0.1.1) +94 more potentially affected by CVE-2026-22599 via @strapi/plugin-content-type-builder (>=4.0.0, <=4.26.0)

@strapi/plugin-content-type-builder NPM version =4.0.0, =0.1.0, =4.12.2, =1.0.0, =1.3.0, =1.3.4, =1.2.1, =4.2.0, =4.2.1 - @cowprotocol/cms 0.1.0-rc.5 and more Source cves: CVE-2026-22599 Source advisory: SNYK:JS-STRAPIPLUGINCONTENTTYPEBUILDER-16686875...

@avorati/strapi-plugin-preview (1.0.1), @catchmexz/fedin-cms (>=5.30.1, <=5.30.2) +9 more potentially affected by CVE-2026-22599 via @strapi/content-type-builder (>=5.0.0, <=5.33.1)

@strapi/content-type-builder NPM version =5.0.0, =5.30.1, =2.0.0, =2.0.0, =5.0.0-beta.6, =3.0.0-beta.1, =3.0.0-beta.2 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2026-22599 Source advisory: OSV:GHSA-3XCQ-8MJW-H6MX...