CVE record · 1 source
CVE-2026-113651
CVSS 3.3ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library.
- Vendor
- Node.js
- Product
- Node.js
- CVSS
- 3.3
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library.
ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library. Prior to uploadfs 1.28.0, attacker-controlled paths that reach the local backend can contain parent-directory segments…