@avorati/strapi-plugin-preview (1.0.1), @catchmexz/fedin-cms (>=5.30.1, <=5.30.2) +10 more potentially affected by CVE-2026-22707 via @strapi/upload (>=5.0.0, <=5.33.2)

@strapi/upload NPM version =5.0.0, =5.30.1, =2.0.0, =0.0.1-rc1, =2.0.0, =5.0.0-beta.6, =3.0.0-beta.1, =3.0.0-beta.2 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2026-22707 Source advisory: OSV:GHSA-PCW7-5633-82VV...

@avorati/strapi-plugin-preview (1.0.1), @catchmexz/fedin-cms (>=5.30.1, <=5.30.2) +10 more potentially affected by CVE-2026-22707 via @strapi/upload (>=5.0.0, <=5.33.2)

@strapi/upload NPM version =5.0.0, =5.30.1, =2.0.0, =0.0.1-rc1, =2.0.0, =5.0.0-beta.6, =3.0.0-beta.1, =3.0.0-beta.2 - stronges 0.1.1 - test-lead 0.1.0 Source cves: CVE-2026-22707 Source advisory: SNYK:JS-STRAPIUPLOAD-16691317...