Skip to contentApostrophecms Apostrophe vulnerabilities
- apostrophecms apostrophe, apostrophecms +1 moreApostropheCMS: publicApiProjection Bypass via `project` Query Builder in Piece-Type REST APICVE-2026-33888Fix available5.3 Medium
- apostrophecms apostrophe, apostrophecms +1 moreApostropheCMS: User Enumeration via Timing Side Channel in Password Reset EndpointCVE-2026-33877Fix available3.7 Low
- apostrophecms apostrophe, apostrophecms +1 moreApostropheCMS MFA/TOTP Bypass via Incorrect MongoDB Query in Bearer Token MiddlewareCVE-2026-32730Fix available8.1 High
- apostrophe, apostrophecms +1 moreApostrophe - Insufficient Session ExpirationCVE-2021-25979Fix available9.8 Critical
- apostrophe, apostrophecms +1 moreApostrophe - XSSCVE-2021-25978Fix available5.4 Medium