CVE-2026-105851 - payload
Versions of the Payload headless CMS before 3.90.0 (and certain canary builds) let users duplicate a document and unintentionally copy data from fields that should be…

Too many irrelevant or confusing CVEs? Use stackflag.com

#payload #elliotpayload #npm #CVE #infosec

CVE-2026-105849 - payload
If you use the free Payload content system version 3.x before 3.90, a user who can only view documents could also read secret API keys stored in those documents. With…

Too many irrelevant or confusing CVEs? Use stackflag.com

#payload #elliotpayload #npm #CVE #infosec

CVE-2026-105845 - payload
Versions of the Payload content management system earlier than 3.88.0 (and certain early canary builds) let a user who can view data craft a request that inserts…

Too many irrelevant or confusing CVEs? Use stackflag.com

#payload #elliotpayload #npm #CVE #infosec