CVE WATCH / VULNERABILITY DETAIL

CVE-2026-113649

MEDIUMCVSS 6.5NVD feed

Published 20 October 2026 · tracked since 21 October 2026

Description

ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module and 4.34.0 of core ApostropheCMS, an editor who can import an enabled content type but lacks its stronger publication role can cause import write helpers to create, replace, or remove publis

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools