GHSA-h5x8-xp6m-x6q4
High · 7.1CVSS
7.1
EPSS
—
Published
Jun 19, 2026
CISA due date
—
The record
@jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | @jhb.software/payload-cloudinary-plugin | 0.3.0 | 0.4.0 |
Related vulnerabilities
- CVE-2026-87947 Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO… CWE-347
- CVE-2026-84918 Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment… CWE-347
- CVE-2026-102271 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102272 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102273 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102268 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-102266 PyJWT is a Python implementation of JSON Web Token standards. CWE-347
- CVE-2026-73784 A potential security vulnerability in HPE IceWall products could be exploited to tamper… CWE-347