payloadcms security advisories
2 threat alerts tracking vulnerabilities and security advisories that affect payloadcms products.
Vulnios monitors payloadcms CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent payloadcms security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2026-105848 — payloadcms — payload
Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can reac
criticalCVE-2026-105848Critical Vulnerability: CVE-2026-105863 — payloadcms — payload
Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custom field option that maps a field to a reserved authentication claim name can pla
criticalCVE-2026-105863
Track payloadcms exposure across your environment
Vulnios automatically cross-references your asset inventory against new payloadcms CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan