Payload didn't enforce field-level password update restrictions
CVE-2026-105855
## Impact When an auth collection defined a field-level access.update restriction on the password field, the restrictio
#advisory
共收录 23210 条相关情报。
← 返回所有主题Payload: ReDoS in Multipart Content-Type Validation
CVE-2026-105854
## Impact A malformed multipart request body could take an extremely long time to finish. ## Patches Users should upgra
Payload vulnerable to API key disclosure through ordinary document reads
CVE-2026-105849
### Impact Users with read access to other user documents could access their active API keys. An exposed key grants the
Payload Ecommerce has an order confirmation validation issue
CVE-2026-105850
## Impact When using the Stripe payment adapter, an order confirmation could be processed more than once under certain c
Payload relationship-query authorization bypass
CVE-2026-105852
## Impact A readable collection could expose information about protected documents in a related collection. **You are
Payload: Token refresh and password reset responses may expose restricted user fields
CVE-2026-105853
## Impact Token refresh and password reset responses could return fields that the requesting user did not have access t
Payload: Field access control bypass on auth collections
CVE-2026-105851
## Impact Payload's duplicate operation copies field values from the source document even when a field is hidden, or it
Payload: Insufficient Access Control in Stripe REST Proxy
CVE-2026-105848
## Impact An authenticated user could perform unintended Stripe operations through the optional Stripe REST proxy. **Y
Payload: Improper access control for MCP API keys
CVE-2026-105806
### Impact Under certain conditions, an authenticated user could manage MCP API keys outside their intended account allo
Payload: Prototype pollution in Payload Import Export plugin
CVE-2026-105844
### Impact An unauthenticated user could cause unintended application behavior when the Import Export plugin is enabled,
Payload: SQL Injection in SQLite and Postgres
CVE-2026-105845
### Impact A user can submit a request that exploits a SQL Injection vulnerability in Payload. You are affected if: - Y
Payload: Untrusted redirect URL parameter exploit
CVE-2026-105846
### Impact Under certain conditions, an attacker can craft a redirect link that sends a guest user to an untrusted desti
Payload: Polymorphic join queries could disclose hidden fields
CVE-2026-105847
### Impact A user with query access could use polymorphic join filters to infer hidden or read-restricted field values,
Payload: Password hashes use insufficient PBKDF2 iterations
CVE-2026-105804
### Impact The password-hashing configuration used a lower work factor than what is recommended. ### Patches Payload no
Payload: Sort queries could expose protected field information
CVE-2026-105805
### Impact Under certain conditions, sorting readable records could reveal limited information about fields the requeste
Kiota: Unsafe oauth_card_path references in Kiota-generated API plugin manifests
CVE-2026-105795
### Impact When generating an API plugin manifest from an attacker-controlled or compromised OpenAPI description, Kiota
Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators
CVE-2026-105796
### Impact An attacker who controls or tampers with an OpenAPI description can cause Kiota to emit attacker-controlled
MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server
CVE-2026-104850
### Summary In affected versions, the SDK's OAuth client let the MCP server decide which authorization server received t
i18next-http-backend incomplete URL validation permits SSRF
CVE-2026-105800
There is an SSRF vulnerability when using `i18next-http-backend`. A colon in an attacker-controlled language value can m
MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL
CVE-2026-105794
# Summary Improper TLS hostname verification allows a man-in-the-middle (MITM) attack on MsQuic. # Details Only MsQu