Skip to content

Apostrophe has authenticated SSRF in rich-text widget import via @apostrophecms/area/validate-widget

High severity GitHub Reviewed Published May 13, 2026 in apostrophecms/apostrophe • Updated Jun 12, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts