https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T08:28:23.827572+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-118171 fkie_cve-2026-118171 2026-11-05T08:28:23.879290+00:00

The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. This allows low-privileged admins to generate preview URLs without knowing document identifiers or holding read permissions.

 https://db.gcve.eu/vuln/ghsa-hqgm-4px4-m8x2 GHSA-hqgm-4px4-m8x2 2026-11-05T08:28:23.879376+00:00

The strapi/content-manager package is missing content-scope authorization in the content manager preview URL endpoint. This allows low-privileged admins to generate preview URLs without knowing document identifiers or holding read permissions.