CVE-2026-58200
1 advisory.
npm/@jhb.software/payload-cloudinary-plugin CVE-2026-58200: high 7.1, EPSS 0.31%
@jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing
Action: Upgrade @jhb.software/payload-cloudinary-plugin to 0.4.0 or later.
npm i @jhb.software/payload-cloudinary-plugin@0.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.3.0 | 0.4.0 | - |
Fixed versions
| 0.4.0 |
Sources
- osv: GHSA-h5x8-xp6m-x6q4
- https://github.com/jhb-software/payload-plugins/security/advisories/GHSA-h5x8-xp6m-x6q4
- https://github.com/jhb-software/payload-plugins
CVE-2026-58200 · published · modified · JSON