Skip to content
OpenAdvisories

Product · apostrophecms

mport-export

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-112956

    ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content

    ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, duplicate-import continuation accepts client-controlled replacement choices without binding them to a user-owned server-side analysis or authorizing…

    apostrophecms apostrophe mport-export @apostrophecms/import-export npm