RubyGems/alchemy_cms CVE-2026-57579: high 7.5, EPSS 0.65%
AlchemyCMS: Unauthenticated nested page API leaks restricted & unpublished content
Action: Upgrade alchemy_cms to 7.4.15 or later.
bundle update alchemy_cmsAffected
| introduced | fixed | last affected |
|---|---|---|
| 8.2.0 | 8.2.6 | - |
| 8.1.0 | 8.1.14 | - |
| 8.0.0.a | 8.0.15 | - |
| 0 | 7.4.15 | - |
Fixed versions
| 8.2.6 | 8.1.14 | 8.0.15 | 7.4.15 |
Sources
- osv: GHSA-mqq5-j7w8-2hgh
- https://github.com/AlchemyCMS/alchemy_cms/security/advisories/GHSA-mqq5-j7w8-2hgh
- https://github.com/AlchemyCMS/alchemy_cms
CVE-2026-57579 · published · modified · JSON