Skip to contentApostrophecms vulnerabilities
Newest
- apostrophecms apostrophe, apostrophecms +1 moreApostropheCMS: Stored XSS in SEO Fields Leads to Authenticated API Data Exposure in ApostropheCMSCVE-2026-35569Fix available8.7 High
- apostrophecms apostrophe, apostrophecms +1 moreApostropheCMS: Stored XSS via CSS Custom Property Injection in `@apostrophecms/color-field` Escaping Style Tag ContextCVE-2026-33889Fix available5.4 Medium
- apostrophecms apostrophe, apostrophecms +1 moreApostropheCMS: publicApiProjection Bypass via `project` Query Builder in Piece-Type REST APICVE-2026-33888Fix available5.3 Medium
- apostrophecms apostrophe, apostrophecms +1 moreApostropheCMS: User Enumeration via Timing Side Channel in Password Reset EndpointCVE-2026-33877Fix available3.7 Low
- apostrophecms import-exportApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip ExtractionCVE-2026-32731Public exploitFix available10.0 Critical
- apostrophecms apostrophe, apostrophecms +1 moreApostropheCMS MFA/TOTP Bypass via Incorrect MongoDB Query in Bearer Token MiddlewareCVE-2026-32730Fix available8.1 High
- apostrophecms sanitize-html'sanitize-html' prior to version 1.0.3 is vulnerable to Cross-site Scripting (XSS). The function ...CVE-2014-1251286.1 Medium
- apostrophecms sanitize-htmlsanitize-html is vulnerable to XSS through incomprehensive sanitizationCVE-2019-25225Fix available6.1 Medium
- apostrophecms sanitize-html, fedoraproject fedora +1 moresanitize-html Information Exposure vulnerabilityCVE-2024-21501Fix available5.3 Medium
- apostrophecms sanitize-htmlRegular Expression Denial of Service (ReDoS)CVE-2022-25887Fix available5.3 Medium
- apostrophe, apostrophecms +1 moreApostrophe - Insufficient Session ExpirationCVE-2021-25979Fix available9.8 Critical
- apostrophe, apostrophecms +1 moreApostrophe - XSSCVE-2021-25978Fix available5.4 Medium
- apostrophecms sanitize-htmlImproper Input Validation in sanitize-htmlCVE-2021-26540Fix available5.3 Medium
- apostrophecms sanitize-htmlImproper Input Validation in sanitize-htmlCVE-2021-26539Fix available5.3 Medium
- apostrophecms sanitize-htmlCross-Site Scripting in sanitize-htmlCVE-2016-1000237Fix available6.1 Medium