MEDIUMnpm
GHSA-26rv-h2hf-3fw4· CVE-2025-4644Payload's SQLite adapter Session Fixation vulnerability
Modified: 8/29/2025
package
npm/@payloadcms/next
pkg:npm/%40payloadcms/next
MEDIUMnpm
GHSA-5v66-m237-hwf7· CVE-2025-4643Payload does not invalidate JWTs after log out
Modified: 8/29/2025
HIGH8.7npm
GHSA-mmxc-95ch-2j7c· CVE-2026-34748@payloadcms/next has Stored XSS in Admin Panel
Modified: 4/6/2026