CVE-2026-118170

The strapi/review-workflows package is subject to a broken access control vulnerability. The flaw allows unauthorized updates to be performed because the system fails to verify if the caller possesses the necessary update rights for the underlying document. Remediation information is referenced i...

CVE-2026-118170 CVE-2026-118170

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document...

EUVD-2026-111346

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document...