CVE-2026-71553
1 advisory.
npm/apostrophe CVE-2026-71553: high, EPSS 0.43%
ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.32.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vmg4-6gfg-83qx
- https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-vmg4-6gfg-83qx
- https://nvd.nist.gov/vuln/detail/CVE-2026-71553
- https://github.com/apostrophecms/apostrophe/commit/5a3746aaed49761e171c2cbfe793267c959829fd
- https://github.com/apostrophecms/apostrophe
CVE-2026-71553 · published · modified · JSON