Browse CVEs

HIGH 7.2 CVE-2026-32103 StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.3, the POST /studiocms_api/dashboard/create-reset… Studiocms 0.4.3+ Fix from $1,9502026-03-11 HIGH 7.2 CVE-2026-32106 StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.3, the REST API createUser endpoint uses string-b… Studiocms 0.4.3+ Fix from $1,9502026-03-11 MEDIUM 6.3 CVE-2026-32101 StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.3.1, the S3 storage manager's isAuthorized() functi… Studiocms 0.3.1+ Fix from $1,6002026-03-11 MEDIUM 5.4 CVE-2026-32104 StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.3, the updateUserNotifications endpoint accepts a… Studiocms 0.4.3+ Fix from $1,6002026-03-11 HIGH 8.8 CVE-2026-30944 StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.0, the /studiocms_api/dashboard/api-tokens endpoi… Studiocms 0.4.0+ Fix from $1,9502026-03-10 HIGH 7.1 CVE-2026-30945 StudioCMS is a server-side-rendered, Astro native, headless content management system. Prior to 0.4.0, the DELETE /studiocms_api/dashboard/api-tokens… Studiocms 0.4.0+ Fix from $1,9502026-03-10 MEDIUM 6.5 CVE-2026-24134 StudioCMS is a server-side-rendered, Astro native, headless content management system. Versions prior to 0.2.0 contain a Broken Object Level Authoriz… Studiocms 0.2.0+ Fix from $1,6002026-01-28