Skip to content
OpenAdvisories

Package · npm

@payloadcms/db-mongodb

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.1
    CVE-2026-106100

    Payload: Field-level write access bypass in Payload on MongoDB

    Payload is a free and open source headless content management system. In @payloadcms/db-mongodb versions before 3.87.0 and canary versions before 4.0.0-canary.20, an authenticated user who can update a document can modify fields that field-level write access …

    Payload CMS payload @payloadcms/db-mongodb npm