AP
Product
apostrophe
by apostrophecms · last CVE Oct 20, 2026
50
CVEs
0
On KEV
9.1
Max CVSS
32
New 30D
Severity mix
Critical 1High 9Medium 34Low 6
Watch

Add apostrophe to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-53609
9.1
0%
Jun 12
Apostrophe has Server-Side Prototype Pollution in apos.util.set via patch operators that leads to process-wide authorization bypass
Affected: <= 4.30.0
Showing 1