Skip to content
OpenAdvisories
Medium · 5.2 CVE-2026-68541 EUVD-2026-125720

PolicyPress is a compliance policy management tool for small and mid-size teams. Prior to version 1.4.1, sensitive content is disclosed via…

Published Nov 13, 2026 · Assigned by GitHub_M

Description

PolicyPress is a compliance policy management tool for small and mid-size teams. Prior to version 1.4.1, sensitive content is disclosed via CSS-only web redaction and insecure starter workflow defaults. This issue has been patched in version 1.4.1.

Affected products

VendorProductAffectedFixed
sc2in PolicyPress < 1.4.1 —

References