Skip to content
OpenAdvisories

Package · npm

@payloadcms/storage-vercel-blob

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.3
    CVE-2026-93363

    Payload CMS storage-vercel-blob Adapter Improper Access Control on Upload Route

    The @payloadcms/storage-vercel-blob storage adapter for Payload contains an improper access control vulnerability that allows authenticated users to bypass collection-level permissions by accessing the client-upload route directly. Attackers can upload files …

    Payload CMS payload @payloadcms/storage-vercel-blob npm