CVE-2026-71553Published
ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-71553 · Microsoft / collected KEV context
cve-program · CVE-2026-71553
- https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-vmg4-6gfg-83qx
- https://github.com/apostrophecms/apostrophe/commit/5a3746aaed49761e171c2cbfe793267c959829fd
euvd · EUVD-2026-60442
- https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-vmg4-6gfg-83qx
- https://github.com/apostrophecms/apostrophe/commit/5a3746aaed49761e171c2cbfe793267c959829fd
nvd · CVE-2026-71553
- https://github.com/apostrophecms/apostrophe/commit/5a3746aaed49761e171c2cbfe793267c959829fd
- https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-vmg4-6gfg-83qx
osv · GHSA-vmg4-6gfg-83qx
Related operational evidence
Explicit CVE identifiers- ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS · Source adds a fixed version · 28 Oct 2026