CVE-2026-59965
1 advisory.
npm/@jhb.software/payload-alt-text-plugin CVE-2026-59965: high 7.1
@jhb.software/payload-alt-text-plugin: Alt Text Endpoint Authorization Bypass via Payload Local API `overrideAccess` Omission
Action: Upgrade @jhb.software/payload-alt-text-plugin to 0.8.0 or later.
npm i @jhb.software/payload-alt-text-plugin@0.8.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.0 | - |
Fixed versions
| 0.8.0 |
Sources
- osv: GHSA-4qpv-39hg-f7fx
- https://github.com/jhb-software/payload-plugins/security/advisories/GHSA-4qpv-39hg-f7fx
- https://nvd.nist.gov/vuln/detail/CVE-2026-59965
- https://github.com/jhb-software/payload-plugins/pull/159
- https://github.com/jhb-software/payload-plugins/commit/e39634868ce13a414e2981e219befc58101654d3
- https://github.com/jhb-software/payload-plugins
- https://github.com/jhb-software/payload-plugins/releases/tag/alt-text@0.8.0
CVE-2026-59965 · published · modified · JSON