All vulnerabilities

Servers and applications

GHSA-mg7r-jhr9-m745

Improper privilege management in scheduled publishing

Severity
Medium 6.0
Published
8 Oct 2026
Last changed
8 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
3.89.0, 4.0.0-canary.29
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
Payload CMSServers and applications · github:payloadcms/payload
  • From 3.12.0 before 3.89.0
  • From 4.0.0-canary.0 before 4.0.0-canary.29

References