payload Security Advisories - Npm | Ecosyste.ms: Advisories

payload

Node, React, Headless CMS and Application Framework built on Next.js

View on github.com · View on npmjs.org

Security Advisories for payload in npm

Moderate

4 months ago

Payload has a CSRF Protection Bypass in Authentication Flow GSA_kwCzR0hTQS1wNm1yLXhmM3ItZ2hxNM4ABUla

npm payload

High

4 months ago

Payload has Authenticated SSRF via Upload Functionality GSA_kwCzR0hTQS02cjdmLXE3ZjUtd3B4OM4ABUlF

npm payload

High

4 months ago

Payload has an SQL Injection via Query Handling GSA_kwCzR0hTQS03eHhoLTM3M3ctMzV2Z84ABUlB

npm payload

Critical

4 months ago

Payload: Pre-Authentication Account Takeover via Parameter Injection in Password Recovery GSA_kwCzR0hTQS1ocDV3LTNoeHgtdm13Zs4ABUj5

npm payload

Moderate

6 months ago

Payload: Server-Side Request Forgery (SSRF) in External File URL Uploads GSA_kwCzR0hTQS1oaGZ4LTV4OGotZjVmNs4ABSy1

npm payload

Moderate

6 months ago

payload-preferences has Cross-Collection IDOR in Access Control (Multi-Auth Environments) GSA_kwCzR0hTQS1qcTI5LXI0OTYtcjk1Nc4ABSAA

npm payload

Moderate

12 months ago

Payload does not invalidate JWTs after log out GSA_kwCzR0hTQS01djY2LW0yMzctaHdmN84ABLjM

npm @payloadcms/graphql, @payloadcms/next, payload

Moderate

12 months ago

Payload's SQLite adapter Session Fixation vulnerability GSA_kwCzR0hTQS0yNnJ2LWgyaGYtM2Z3NM4ABLjK

npm @payloadcms/graphql, @payloadcms/next, payload

High

over 3 years ago

Hidden fields can be leaked on readable collections in Payload GSA_kwCzR0hTQS0zNWpqLXZxY2YtZjJqZs4AAy-5

npm payload

Critical

over 4 years ago

Unrestricted Upload of File with Dangerous Type in Payload GSA_kwCzR0hTQS13OHhoLTkzcWgtMzV2d8068Q

npm payload

Filter by Severity

Moderate 5 High 3 Critical 2