Home Packages KEV Critical Insights Jobs Pricing

Loading…

Data from OSV.dev, CISA KEV, and FIRST EPSS.Sync status GitHub

npm/@payloadcms/next — 3 CVEs · VulnScope

pkg:npm/@payloadcms/next

3 total CVEsHIGH1

✅ Check your installed version

All known vulnerabilities

HIGH8.7CVE-2026-34748@payloadcms/next has Stored XSS in Admin Panel
from 0, < 3.78.0
—CVE-2025-4644Payload's SQLite adapter Session Fixation vulnerability
from 0, < 3.44.0
—CVE-2025-4643Payload does not invalidate JWTs after log out
from 0, < 3.44.0