Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

studiocms

npm

A Community-Driven Astro native CMS. Built from the ground up by the Astro community.

View on github.com · View on npmjs.org

Security Advisories for studiocms in npm

Low
6 months ago

StudioCMS REST getUsers Exposes Owner Account Records to Admin Tokens GSA_kwCzR0hTQS14dmY0LWNoNHEtMm0yNM4ABTuI

npm studiocms
Moderate
6 months ago

StudioCMS: REST API Missing Rank Check Allows Admin to Create Peer Admin Accounts GSA_kwCzR0hTQS13ajU2LWc5NnItNjczcc4ABTi-

npm studiocms
Moderate
6 months ago

StudioCMS: IDOR in User Notification Preferences Allows Any Authenticated User to Modify Any User's Settings GSA_kwCzR0hTQS05djgyLXhybTQtbXA1Ms4ABTi9

npm studiocms
Moderate
6 months ago

StudioCMS: IDOR — Admin-to-Owner Account Takeover via Password Reset Link Generation GSA_kwCzR0hTQS1oN3ZyLWNnMjUtamY4Y84ABTi8

npm studiocms
High
6 months ago

StudioCMS: IDOR — Arbitrary API Token Revocation Leading to Denial of Service GSA_kwCzR0hTQS04cmdqLXZyZnItNmhxcs4ABTb7

npm studiocms
High
6 months ago

StudioCMS has Privilege Escalation via Insecure API Token Generation GSA_kwCzR0hTQS02Njd3LW1taDctbXJyNM4ABTXr

npm studiocms
Moderate
7 months ago

StudioCMS has Authorization Bypass Through User-Controlled Key GSA_kwCzR0hTQS04Y3c2LTUzbTUtNDkzMs4ABRo9

npm studiocms

Filter by Severity

Moderate 4 High 2 Low 1