UpHeron
All vulnerabilities

Servers and applications

GHSA-m35c-r5p5-c3w8

Improper Restriction of Excessive Authentication Attempts

Severity
Medium 5.3
Published
8 Oct 2026
Last changed
8 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
3.90.0, 4.0.0-canary.34
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Payload CMSServers and applications · github:payloadcms/payload
  • From 3.0.0 before 3.90.0
  • From 4.0.0-canary.0 before 4.0.0-canary.34

References