Skip to content

CVE record · 1 source

CVE-2026-118170

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the…

Vendor: Strapi
Product: Strapi Open Source and Enterprise Headless CMS
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

7

CVE NVD 4d ago

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the…

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document.

CVE-2026-118170 Strapi