@payloadcms/graphql vulnerabilities (npm)

3 vulnerabilities.

• @payloadcms/graphql npm Payload has Unvalidated Input in Password Recovery Endpoints CVE-2026-34751 Fix available 9.1 CriticalApril 1, 2026
• @payloadcms/graphql npm User Session Fixation after Account Removal in PayloadCMS CVE-2025-4644 Fix available 5.3 MediumAugust 29, 2025
• @payloadcms/graphql npm Lack of JWT Expiration after Log Out in PayloadCMS CVE-2025-4643 Fix available 6.3 MediumAugust 29, 2025