https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T20:59:35.707199+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-103365 cnvd-2021-103365 2026-10-07T20:59:35.712893+00:00 cnvd-2021-103365 https://cve.radiocsirt.org/vuln/euvd-2026-236007 EUVD-2026-236007 2026-10-07T20:59:35.712933+00:00 EUVD-2026-236007 https://cve.radiocsirt.org/vuln/fkie_cve-2021-25979 fkie_cve-2021-25979 2026-10-07T20:59:35.712954+00:00

Apostrophe CMS versions prior to 3.3.1 did not invalidate existing login sessions when disabling a user account or changing the password, creating a situation in which a device compromised by a third party could not be locked out by those means. As a mitigation for older releases the user account in question can be archived (3.x) or moved to the trash (2.x and earlier) which does disable the existing session.

 https://cve.radiocsirt.org/vuln/ghsa-9j9m-8wjc-ff96 GHSA-9j9m-8wjc-ff96 — Apostrophe CMS Insufficient Session Expiration vulnerability 2026-10-07T20:59:35.712999+00:00

Affected: npm: apostrophe

Apostrophe CMS versions between 2.63.0 to 3.3.1 affected by an insufficient session expiration vulnerability, which allows unauthenticated remote attackers to hijack recently logged-in users' sessions. As a mitigation for older releases the user account in question can be archived (3.x) or moved to the trash (2.x and earlier) which does disable the existing session.

 https://cve.radiocsirt.org/vuln/gsd-2021-25979 gsd-2021-25979 2026-10-07T20:59:35.713040+00:00 gsd-2021-25979