Threats Tagged 'ghsa-xgv3-crq2-6f69'
View all threats tagged with 'ghsa-xgv3-crq2-6f69'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-xgv3-crq2-6f69'
Click on any threat for detailed analysis and mitigation recommendations
0 ## Impact Token refresh and password reset responses could return fields that the requesting user did not have access to. You are affected if: - An authentication collection contains hidden or read-restricted fields. ## Patches Authentication responses now apply field access and hidden-field filtering before returning user documents. Full user documents remain available server-side for access control. Users should upgrade Payload packages to `>= 3.90.0` or `>= 4.0.0-canary.34`. Custom authentication strategies remain responsible for filtering user documents returned through custom responses. ## Workarounds There is no complete workaround. Users should upgrade Payload packages to `>= 3.90.0` or `>= 4.0.0-canary.34`. Join the discussion | CVE Database V5 | 10/06/2026, 16:17:28 UTC Added: 10/06/2026, 16:19:03 UTC |
Showing 1 to 1 of 1 result