tocsin

CVE-2026-113667

3 advisories.

npm/@apostrophecms/form CVE-2026-113667: medium 5.3

ApostropheCMS: CAPTCHA response token not URL-encoded

Action: Upgrade @apostrophecms/form to 1.5.5 or later.

npm i @apostrophecms/form@1.5.5

Affected

introducedfixedlast affected
01.5.5-

Fixed versions

1.5.5

Sources

CVE-2026-113667 · published · modified · JSON

npm/@apostrophecms/login-recaptcha CVE-2026-113667: medium

ApostropheCMS: CAPTCHA response token not URL-encoded

Action: Upgrade @apostrophecms/login-recaptcha to 1.2.1 or later.

npm i @apostrophecms/login-recaptcha@1.2.1

Affected

introducedfixedlast affected
01.2.1-

Fixed versions

1.2.1

Sources

CVE-2026-113667 · published · modified · JSON

npm/@apostrophecms/login-hcaptcha CVE-2026-113667: medium

ApostropheCMS: CAPTCHA response token not URL-encoded

Action: Upgrade @apostrophecms/login-hcaptcha to 1.3.0 or later.

npm i @apostrophecms/login-hcaptcha@1.3.0

Affected

introducedfixedlast affected
01.3.0-

Fixed versions

1.3.0

Sources

CVE-2026-113667 · published · modified · JSON