Skip to content
OpenAdvisories

Vendor

@studiocms

1 known vulnerabilities.

Products

s3-storage 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-32101

    StudioCMS S3 Storage Manager Authorization Bypass via Missing `await` on Async Auth Check

    StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.3.1, the S3 storage manager's isAuthorized() function is declared async (returns Promise<boolean>) but is called without await in both the POST and PUT handlers.…

    @studiocms s3-storage @studiocms/s3-storage npm