Skip to content
OpenAdvisories

Vendor

SonicJs-Org

1 known vulnerabilities.

Products

sonicjs 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-119707

    SonicJS through 3.0.0 Missing Authorization in Content Write API

    SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /api/content write routes that only check coarse role labels. Authenticated authors or editors can use a bearer JWT or API key to create, modify, publish, or soft…

    SonicJs-Org sonicjs