What’s Vulnerable › Products

@apostrophecms passport-bridge vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your @apostrophecms passport-bridge version is affected

Latest @apostrophecms passport-bridge vulnerabilities

• CVE-2026-113669 — ApostropheCMS: Cross-domain session token in URL confers session takeover (CVSS 5.3)