What’s Vulnerable › Products

delmaredigital payload-puck vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your delmaredigital payload-puck version is affected

Latest delmaredigital payload-puck vulnerabilities

• CVE-2026-39397 — @delmaredigital/payload-puc is missing authorization on /api/puck/* CRUD endpoints allows unauthenticated access to Puck-registered collections (CVSS 9.8)