CVE-2026-58200

Payload Plugins is a collection of plugins designed to enhance Payload CMS. From 0.3.0 until 0.4.0, @jhb.software/payload-cloudinary-plugin deployments with clientUploads enabled expose POST /api/cloudinary-generate-signature, whose handler in cloudinary/src/getGenerateSignature.ts passes...

CVE-2026-58200

Payload Plugins is a collection of plugins designed to enhance Payload CMS. From 0.3.0 until 0.4.0, @jhb.software/payload-cloudinary-plugin deployments with clientUploads enabled expose POST /api/cloudinary-generate-signature, whose handler in cloudinary/src/getGenerateSignature.ts passes...

payload-cloudinary-plugin (0.0.10), payload-plugin-lexical (>=0.0.19, <=0.0.21) potentially affected by CVE-2023-30843 via payload (>=1.1.26, <=1.6.26)

payload NPM version =1.1.26, =0.0.19, =0.0.21 Source cves: CVE-2023-30843 Source advisory: OSV:GHSA-35JJ-VQCF-F2JF...