@payloadcms/storage-s3 vulnerabilities (npm)

2 vulnerabilities.

• @payloadcms/storage-s3 npm Payload: Client uploads could overwrite S3 objects CVE-2026-105867 Fix available 7.1 HighOctober 6, 2026
• @payloadcms/storage-s3 npm Payload has Insufficient Filename Validation in Client-Upload Signed-URL Endpoints CVE-2026-34750 Fix available 6.5 MediumApril 1, 2026