Skip to content
OpenAdvisories

Vendor

apostrophecms

56 known vulnerabilities.

Products

apostrophe 50 import-export 8 sanitize-html 7 uploadfs 2 form 2 db-connect 1 ai-helper 1 passport-bridge 1 login-hcaptcha 1 login-recaptcha 1 @apostrophecms/seo 1 @apostrophecms/cli 1 ApostropheCMS 1 mport-export 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-53609

    Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass

    ApostropheCMS is an open-source Node.js content management system. In versions up to and including 4.30.0, `apos.util.set()` traverses dot-notation paths without sanitizing `__proto__`, allowing an authenticated editor to write arbitrary values to `Object.pro…

    apostrophecms apostrophe apostrophe npm
  • Critical 9.3
    CVE-2026-44990

    Apostrophe has default XSS via `xmp` raw-text passthrough in `sanitize-html`

    ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Under the default configuration, versions of `sanitize-html` prior to 2.17.4 can turn attacker-controlled content inside a …

    apostrophecms sanitize-html sanitize-html npm
  • Critical 10.0
    CVE-2026-32731 Public exploit

    ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction

    ApostropheCMS is an open-source content management framework. Prior to version 3.5.3 of `@apostrophecms/import-export`, The `extract()` function in `gzip.js` constructs file-write paths using `fs.createWriteStream(path.join(exportPath, header.name))`. `path.j…

    apostrophecms import-export @apostrophecms/import-export npm