CyberSecBulletin

Jhb-software vulnerabilities

We track 2 vulnerabilities in Jhb-software products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.

2vulnerabilities
0critical
2high
0exploited
7.1average CVSS score

Latest Jhb-software vulnerabilities

  • 7.1 High severity

    payload-plugins: Improper Verification of Cryptographic Signature

    CVE-2026-58200Jhb-software

    Payload Plugins is a collection of plugins designed to enhance Payload CMS. From 0.3.0 until 0.4.0, @jhb.software/payload-cloudinary-plugin deployments with clientUploads enabled expose POST /api/cloudinary-generate-signature, whose handler in cloudinary/src/g

  • 7.1 High severity

    payload-plugins: Incorrect Authorization

    CVE-2026-59965Jhb-software

    Payload Plugins is a collection of plugins designed to enhance Payload CMS. In 0.7.0, @jhb.software/payload-alt-text-plugin exposes POST /api/alt-text-plugin/generate and POST /api/alt-text-plugin/bulk with a default guard that accepts any authenticated user,