Skip to content
OpenAdvisories

Vendor

AlchemyCMS

3 known vulnerabilities.

Products

alchemy_cms 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-57579

    Alchemy: Unauthenticated nested page API leaks restricted & unpublished content

    Alchemy is an open source content management system engine written in Ruby on Rails. Prior to 7.4.15, 8.0.15, 8.1.14, and 8.2.6, the unauthenticated GET /api/pages/nested endpoint implemented by Api::PagesController#nested in app/controllers/alchemy/api/pages…

    AlchemyCMS alchemy_cms alchemy_cms RubyGems