CVE-2026-35569
1 advisory.
npm/apostrophe CVE-2026-35569: high 8.7
Stored XSS in SEO Fields Leads to Authenticated API Data Exposure in ApostropheCMS
Action: Upgrade apostrophe to 4.29.0 or later.
npm i apostrophe@4.29.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.29.0 | - |
Fixed versions
| 4.29.0 |
Sources
- osv: GHSA-855c-r2vq-c292
- https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-855c-r2vq-c292
- https://nvd.nist.gov/vuln/detail/CVE-2026-35569
- https://github.com/apostrophecms/apostrophe/commit/0e57dd07a56ae1ba1e3af646ba026db4d0ab5bb3
- https://github.com/Chittu13/cve-research/tree/main/CVE-2026-35569
- https://github.com/apostrophecms/apostrophe
CVE-2026-35569 · published · modified · JSON