Alchemycms Alchemy Cms
3 CVEs affecting Alchemycms Alchemy Cms. Latest disclosed: 2026-09-14. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-57579 | High | 7.5 | 2026-09-14 | Alchemy is an open source content management system engine written in Ruby on Rails. Prior to 7.4.15, 8.0.15, 8.1.14, and 8.2.6, the unauthenticated GET /api/p… |
CVE-2026-23885 | Medium | 6.4 | 2026-01-19 | Alchemy is an open source content management system engine written in Ruby on Rails. Prior to versions 7.4.12 and 8.0.3, the application uses the Ruby `eval()`… |
CVE-2026-86777 | Medium | 5.3 | 2026-09-09 | AlchemyCMS versions before 7.4.16 and 8.x before 8.3.6 fail to authorize access to the GET /api/nodes endpoint, allowing unauthenticated attackers to retrieve… |