PT-2026-118497

Name of the Vulnerable Software and Affected Versions ApostropheCMS versions 1.25.0 through 1.27.0 Description When the uploadfs component is configured with the Azure backend and the sas variable is set to true, the createContainer function builds the BlobServiceClient using a URL that includes...

PT-2026-120310

Summary When uploadfs is configured with the Azure backend and sas: true a supported configuration introduced in uploadfs 1.25.0, createContainer builds the BlobServiceClient from a URL that embeds the full SAS query string, and Azure SDK v12 derived clients inherit that query string. As a result...