https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 23:08:24 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-105857 <p>Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can craft a form submission that executes code remotely on the server. This issue is fixed in versions 3.90.0 and 4.0.0-canary.34.</p> <p>Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can craft a form submission that executes code remotely on the server. This issue is fixed in versions 3.90.0 and 4.0.0-canary.34.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-105857 https://vulnerability.circl.lu/vuln/ghsa-r488-j9vj-wx3q <p><strong>Affected:</strong> npm: @payloadcms/plugin-form-builder</p> <p>## Impact</p> <p>A vulnerability in `@payloadcms/plugin-form-builder` in versions &lt; 3.90.0 allow submissions which could be crafted to execute remote code on the server.</p> <p>**You are affected if:**</p> <p>- You are using `@payloadcms/plugin-form-builder`</p> <p>## Patches</p> <p>Users should upgrade Payload packages to `&gt;= 3.90.0` or `&gt;= 4.0.0-canary.34`.</p> <p><strong>Affected:</strong> npm: @payloadcms/plugin-form-builder</p> <p>## Impact</p> <p>A vulnerability in `@payloadcms/plugin-form-builder` in versions &lt; 3.90.0 allow submissions which could be crafted to execute remote code on the server.</p> <p>**You are affected if:**</p> <p>- You are using `@payloadcms/plugin-form-builder`</p> <p>## Patches</p> <p>Users should upgrade Payload packages to `&gt;= 3.90.0` or `&gt;= 4.0.0-canary.34`.</p> https://vulnerability.circl.lu/vuln/ghsa-r488-j9vj-wx3q