{"action":"Upgrade studiocms to 0.2.0 or later.","affected":[{"fixed":"0.2.0","introduced":"0"}],"component":"studiocms","cve_ids":["CVE-2026-24134"],"ecosystem":"npm","epss":0.00343,"exploited":false,"fixed_versions":["0.2.0"],"ghsa_id":"GHSA-8cw6-53m5-4932","id":"tcs_01M5KFCNQ17VR60D1FS4PNWSAE","modified_at":"2026-02-03T03:04:44.269676Z","published_at":"2026-01-27T22:13:52Z","references":["https://osv.dev/vulnerability/GHSA-8cw6-53m5-4932","https://github.com/withstudiocms/studiocms/security/advisories/GHSA-8cw6-53m5-4932","https://nvd.nist.gov/vuln/detail/CVE-2026-24134","https://github.com/withstudiocms/studiocms/commit/efc10bee20db090fdd75463622c30dda390c50ad","https://github.com/withstudiocms/studiocms","https://github.com/withstudiocms/studiocms/releases/tag/studiocms%400.2.0"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-8cw6-53m5-4932","url":"https://osv.dev/vulnerability/GHSA-8cw6-53m5-4932"}],"summary":"StudioCMS has Authorization Bypass Through User-Controlled Key"}