CVE-2026-113649

The ApostropheCMS Node.js content management system is vulnerable to a publication role bypass in the import-export module (prior to 3.7.1) and the core system (prior to 4.34.0). An editor capable of importing an enabled content type but lacking the required publication role can leverage import w...