Skip to content
OpenAdvisories

Package · NuGet

Umbraco.Cms.Api.Delivery

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    CVE-2025-54425

    Umbraco's Delivery API allows for cached requests to be returned with an invalid API key

    Umbraco is an ASP.NET CMS. In versions 13.0.0 through 13.9.2, 15.0.0 through 15.4.1 and 16.0.0 through 16.1.0, the content delivery API can be restricted from public access where an API key must be provided in a header to authorize the request. It's also poss…

    umbraco Umbraco-CMS Umbraco.Cms.Api.Delivery NuGet