CVE-2026-32731
1 advisory.
npm/@apostrophecms/import-export CVE-2026-32731: critical 9.9, EPSS 0.61%
ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction
Action: Upgrade @apostrophecms/import-export to 3.5.3 or later.
npm i @apostrophecms/import-export@3.5.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.5.3 | - |
Fixed versions
| 3.5.3 |
Sources
- osv: GHSA-mwxc-m426-3f78
- https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-mwxc-m426-3f78
- https://github.com/apostrophecms/apostrophe
CVE-2026-32731 · published · modified · JSON