Skip to content
OpenAdvisories

Package · npm

@jhb.software/payload-cloudinary-plugin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.1
    CVE-2026-58200

    @jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing

    Payload Plugins is a collection of plugins designed to enhance Payload CMS. From 0.3.0 until 0.4.0, @jhb.software/payload-cloudinary-plugin deployments with clientUploads enabled expose POST /api/cloudinary-generate-signature, whose handler in cloudinary/src/…

    jhb-software payload-plugins @jhb.software/payload-cloudinary-plugin npm