VYPR

db-connect

by Apostrophecms

CVEs (1)

  • CVE-2026-113666HigOct 20, 2026
    risk 0.39cvss 7.1epss —

    ApostropheCMS is an open-source Node.js content management system. Prior to 1.1.0 of db-connect and 4.33.0 of ApostropheCMS, an account with view-draft access can submit a projection exclusion path that traverses through a constructor prototype chain to a shared prototype member…