https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 11:58:06 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-105847 <p>Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a user who can query a collection with a polymorphic join to sensitive fields can infer hidden or read-restricted values, including password-reset tokens, through polymorphic join filters. This issue is fixed in versions 3.90.0 and 4.0.0-canary.34.</p> <p>Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a user who can query a collection with a polymorphic join to sensitive fields can infer hidden or read-restricted values, including password-reset tokens, through polymorphic join filters. This issue is fixed in versions 3.90.0 and 4.0.0-canary.34.</p> https://db.gcve.eu/vuln/fkie_cve-2026-105847 https://db.gcve.eu/vuln/ghsa-fpww-c55p-cjv6 <p><strong>Affected:</strong> npm: payload</p> <p>### Impact</p> <p>A user with query access could use polymorphic join filters to infer hidden or read-restricted field values, including password-reset tokens.</p> <p>You are affected if:</p> <p>- You use an affected Payload version. - Users can query a collection with a polymorphic join to sensitive fields.</p> <p>### Patches</p> <p>Users should upgrade Payload packages to `&gt;= 3.90.0` or `&gt;= 4.0.0-canary.34`.</p> <p>### Workarounds</p> <p>There is no complete workaround. Restricting read access to sensitive collections reduces exposure but does not replace upgrading.</p> <p><strong>Affected:</strong> npm: payload</p> <p>### Impact</p> <p>A user with query access could use polymorphic join filters to infer hidden or read-restricted field values, including password-reset tokens.</p> <p>You are affected if:</p> <p>- You use an affected Payload version. - Users can query a collection with a polymorphic join to sensitive fields.</p> <p>### Patches</p> <p>Users should upgrade Payload packages to `&gt;= 3.90.0` or `&gt;= 4.0.0-canary.34`.</p> <p>### Workarounds</p> <p>There is no complete workaround. Restricting read access to sensitive collections reduces exposure but does not replace upgrading.</p> https://db.gcve.eu/vuln/ghsa-fpww-c55p-cjv6