VYPR

Import Export

by Apostrophecms

CVEs (1)

  • CVE-2026-32731CriMar 18, 2026
    risk 0.57cvss 9.9epss 0.00

    ApostropheCMS is an open-source content management framework. Prior to version 3.5.3 of `@apostrophecms/import-export`, The `extract()` function in `gzip.js` constructs file-write paths using `fs.createWriteStream(path.join(exportPath, header.name))`. `path.join()` does not…