{"id":"EUVD-2026-60442","enisaUuid":"851ebc40-dcce-3203-96e4-0b8df6669cc4","description":"ApostropheCMS is an open-source Node.js content management system. In 4.32.0 and earlier, PATCH /api/v1/article/:id accepts the inherited path toString.call and passes it through the utility module to apos.util.set() and apos.util.get(), allowing an authenticated editor to overwrite the shared Object.prototype.toString function\u0027s call property and cause a persistent process-wide denial of service until restart.","datePublished":"Aug 17, 2026, 8:03:37 PM","dateUpdated":"Aug 17, 2026, 8:14:15 PM","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-vmg4-6gfg-83qx\nhttps://github.com/apostrophecms/apostrophe/commit/5a3746aaed49761e171c2cbfe793267c959829fd\n","aliases":"CVE-2026-71553\nGHSA-vmg4-6gfg-83qx\n","assigner":"GitHub_M","epss":0.43,"enisaIdProduct":[{"id":"44862bc8-496d-37bc-8e36-3da8598f4591","product":{"name":"Apostrophe ","vendor":{"name":"apostrophecms"}},"product_version":"≤ 4.32.0"}],"enisaIdVendor":[{"id":"3e00ee05-ce6c-3278-b0c5-6e787f41666f","vendor":{"name":"apostrophecms"}}],"enisaIdVulnerability":[{"id":"5c562c58-9762-3f02-9c9b-1226ce9f76dd","vulnerability":{"id":"GHSA-vmg4-6gfg-83qx","description":"ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS","datePublished":"Sep 2, 2026, 3:12:41 PM","dateUpdated":"Oct 28, 2026, 3:12:56 PM","baseScore":0.0,"references":"https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-vmg4-6gfg-83qx\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-71553\nhttps://github.com/apostrophecms/apostrophe/commit/5a3746aaed49761e171c2cbfe793267c959829fd\nhttps://github.com/apostrophecms/apostrophe\n","enisa_id":"EUVD-2026-60442\n","aliases":"CVE-2026-71553\nGHSA-vmg4-6gfg-83qx\n","epss":0.0,"dataProcessed":"Oct 30, 2026, 1:01:07 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"ccfa088a-cea1-3fe4-86c9-2260a0af2c9f","vulnerability":{"id":"CVE-2026-71553","description":"ApostropheCMS is an open-source Node.js content management system. In 4.32.0 and earlier, PATCH /api/v1/article/:id accepts the inherited path toString.call and passes it through the utility module to apos.util.set() and apos.util.get(), allowing an authenticated editor to overwrite the shared Object.prototype.toString function\u0027s call property and cause a persistent process-wide denial of service until restart.","datePublished":"Aug 17, 2026, 8:03:37 PM","dateUpdated":"Aug 17, 2026, 8:14:15 PM","status":"PUBLISHED","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-vmg4-6gfg-83qx\nhttps://github.com/apostrophecms/apostrophe/commit/5a3746aaed49761e171c2cbfe793267c959829fd\n","enisa_id":"EUVD-2026-60442\n","assigner":"GitHub_M","epss":0.43,"dataProcessed":"Oct 30, 2026, 7:13:56 AM","vulnerabilityProduct":[{"id":"617aff04-cdfd-386b-ac3e-deefda05174f","product":{"name":"Apostrophe ","vendor":{"name":"apostrophecms"}},"product_version":"≤ 4.32.0"}],"vulnerabilityVendor":[{"id":"9447dd76-4f01-3f7d-9795-a0de9433160b","vendor":{"name":"apostrophecms"}}]}}],"enisaIdAdvisory":[]}