Apostrophecms Import-Export
7 CVEs affecting Apostrophecms Import-Export. Latest disclosed: 2026-10-20. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-32731 | Critical | 9.9 | 2026-03-18 | ApostropheCMS is an open-source content management framework. Prior to version 3.5.3 of `@apostrophecms/import-export`, The `extract()` function in `gzip.js` c… |
CVE-2026-113711 | High | 7.5 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 of the import-export module, import routes invoke… |
CVE-2026-113649 | Medium | 6.5 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module and 4.34.0 of core ApostropheCMS, an editor who c… |
CVE-2026-113662 | Medium | 5.4 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated user with import access to a ta… |
CVE-2026-113648 | Low | 3.1 | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, the API endpoint POST /api/v1/@apostrophecms/imp… |
CVE-2026-113664 | | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated importer can submit a tar entry… | |
CVE-2026-112953 | | 2026-10-20 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictable export archive filenames allow an un… |