@apostrophecms/import-export vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2026-112953Medium@apostrophecms/import-export: ApostropheCMS: Exposure of Sensitive Information via predictable export filenamesCVE-2026-113648Low@apostrophecms/import-export: ApostropheCMS: Missing Authentication in `cleanExport` RouteCVE-2026-113649Medium@apostrophecms/import-export: ApostropheCMS: Import API bypasses publication roles for protected contentCVE-2026-112956Medium@apostrophecms/import-export: ApostropheCMS: Archive duplicate continuation lets contributors overwrite published contentCVE-2026-112955Medium@apostrophecms/import-export: ApostropheCMS: Import archives can exhaust server storage and deny serviceCVE-2026-113711Highapostrophe: ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-exportCVE-2026-113664Medium@apostrophecms/import-export: ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring testCVE-2026-113662Medium@apostrophecms/import-export: ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified documentCVE-2026-63667Medium@apostrophecms/import-export: ApostropheCMS: Arbitrary file read via import-export attachment-name path traversalCVE-2026-32731Critical@apostrophecms/import-export: ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo