MEDIUMnpm
GHSA-26rv-h2hf-3fw4· CVE-2025-4644Payload's SQLite adapter Session Fixation vulnerability
Modified: 8/29/2025
package
npm/@payloadcms/graphql
pkg:npm/%40payloadcms/graphql
MEDIUMnpm
GHSA-5v66-m237-hwf7· CVE-2025-4643Payload does not invalidate JWTs after log out
Modified: 8/29/2025
CRITICAL9.1npm
GHSA-hp5w-3hxx-vmwf· CVE-2026-34751Payload: Pre-Authentication Account Takeover via Parameter Injection in Password Recovery
Modified: 4/8/2026