Threats tagged 'ghsa-66wr-7vmr-p5jq'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.2	EPSS 0.4%	CVE-2026-105863payloadcms payload · Authentication Bypass by Spoofing Critical9.2EPSS 0.4%2026-10-06CVE Database V5CVE-2026-105863 PayloadCMS versions from 3.0.0 up to but not including 3.90.0, and certain 4.0.0-canary versions, contain an authentication bypass vulnerability. This occurs when a custom field is mapped to a reserved authentication claim name, allowing unintended values to be placed in authentication tokens at login. The issue is fixed in version 3.90.0. EPSS 0.4%Vulnerability CWE-290 #ghsa-66wr-7vmr-p5jq #npm	CVE Database V5	2026-10-06

Page 1 of 1