Payload: Order confirmation validation issue in Payload Ecommerce

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-105850 · Microsoft / collected KEV context

EUVD-2026-93493

GHSA-8r29-2mp2-pmrw

cve-program · CVE-2026-105850

• https://github.com/payloadcms/payload/security/advisories/GHSA-8r29-2mp2-pmrw
• https://github.com/payloadcms/payload/commit/6c0c4dc9b4ce1ac87b03fbb5dd7356b8559cbc4e
• https://github.com/payloadcms/payload/releases/tag/v3.90.0

euvd · EUVD-2026-93493

• https://github.com/payloadcms/payload/security/advisories/GHSA-8r29-2mp2-pmrw
• https://github.com/payloadcms/payload/commit/6c0c4dc9b4ce1ac87b03fbb5dd7356b8559cbc4e
• https://github.com/payloadcms/payload/releases/tag/v3.90.0

nvd · CVE-2026-105850

• https://github.com/payloadcms/payload/commit/6c0c4dc9b4ce1ac87b03fbb5dd7356b8559cbc4e
• https://github.com/payloadcms/payload/releases/tag/v3.90.0
• https://github.com/payloadcms/payload/security/advisories/GHSA-8r29-2mp2-pmrw

osv · GHSA-8r29-2mp2-pmrw

• https://github.com/payloadcms/payload/security/advisories/GHSA-8r29-2mp2-pmrw
• https://github.com/payloadcms/payload/commit/6c0c4dc9b4ce1ac87b03fbb5dd7356b8559cbc4e
• https://github.com/payloadcms/payload
• https://github.com/payloadcms/payload/releases/tag/v3.90.0

No related operational record is retained in the current change model.