@apostrophecms/seo vulnerabilities

1 known vulnerability in @apostrophecms/seo from Apostrophecms. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  @apostrophecms/seo: Improper Neutralization of Input During Web Page Generation

  CVE-2026-53608Jun 12, 2026Apostrophecms

  ApostropheCMS is an open-source Node.js content management system. Versions up to and including 1.4.2 of the `@apostrophecms/seo` package injects the Google Analytics Tracking ID (`seoGoogleTrackingId`) and Google Tag Manager ID (`seoGoogleTagManager`) directl