@apostrophecms/passport-bridge vulnerabilities (npm)

1 vulnerability.

• @apostrophecms/passport-bridge npm ApostropheCMS: Cross-domain session token in URL confers session takeover CVE-2026-113669 Fix available 5.3 MediumOctober 20, 2026