alchemy_cms vulnerabilities (RubyGems)

2 vulnerabilities.

• alchemy_cms RubyGems Alchemy: Unauthenticated nested page API leaks restricted & unpublished content CVE-2026-57579 Fix available 7.5 HighJune 19, 2026
• alchemy_cms RubyGems AlchemyCMS has Authenticated Remote Code Execution (RCE) via eval injection in ResourcesHelper CVE-2026-23885 Public exploitFix available 6.4 MediumJanuary 19, 2026