@jhb.software/payload-cloudinary-plugin: Arbitrary Cloudinary API Parameter Signing

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-58200 · Microsoft / collected KEV context

EUVD-2026-78825

GHSA-h5x8-xp6m-x6q4

cve-program · CVE-2026-58200

• https://github.com/jhb-software/payload-plugins/security/advisories/GHSA-h5x8-xp6m-x6q4
• https://github.com/jhb-software/payload-plugins/pull/155
• https://github.com/jhb-software/payload-plugins/commit/da2325901c5eeced17d33a1b2e647e300b8cbff2
• https://github.com/jhb-software/payload-plugins/releases/tag/[email protected]

euvd · EUVD-2026-78825

• https://github.com/jhb-software/payload-plugins/security/advisories/GHSA-h5x8-xp6m-x6q4
• https://github.com/jhb-software/payload-plugins/pull/155
• https://github.com/jhb-software/payload-plugins/commit/da2325901c5eeced17d33a1b2e647e300b8cbff2
• https://github.com/jhb-software/payload-plugins/releases/tag/[email protected]

nvd · CVE-2026-58200

• https://github.com/jhb-software/payload-plugins/commit/da2325901c5eeced17d33a1b2e647e300b8cbff2
• https://github.com/jhb-software/payload-plugins/pull/155
• https://github.com/jhb-software/payload-plugins/releases/tag/[email protected]
• https://github.com/jhb-software/payload-plugins/security/advisories/GHSA-h5x8-xp6m-x6q4

osv · GHSA-h5x8-xp6m-x6q4

• https://github.com/jhb-software/payload-plugins/security/advisories/GHSA-h5x8-xp6m-x6q4
• https://github.com/jhb-software/payload-plugins

No related operational record is retained in the current change model.