Skip to content
OpenAdvisories

Package · npm

studiocms

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-24134 Public exploit

    StudioCMS has an Authorization Bypass Through User-Controlled Key

    StudioCMS is a server-side-rendered, Astro native, headless content management system. Versions prior to 0.2.0 contain a Broken Object Level Authorization (BOLA) vulnerability in the Content Management feature that allows users with the "Visitor" role to acce…

    withstudiocms studiocms studiocms npm