tocsin

CVE-2026-32101

1 advisory.

npm/@studiocms/s3-storage CVE-2026-32101: high 7.6, EPSS 0.29%

StudioCMS S3 Storage Manager Authorization Bypass via Missing `await` on Async Auth Check

Action: Upgrade @studiocms/s3-storage to 0.3.1 or later.

npm i @studiocms/s3-storage@0.3.1

Affected

introducedfixedlast affected
00.3.1-

Fixed versions

0.3.1

Sources

CVE-2026-32101 · published · modified · JSON