CyberSecBulletin

SonicJs-Org vulnerabilities

We track 1 vulnerability in SonicJs-Org products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest SonicJs-Org vulnerabilities

  • 7.1 High severity

    sonicjs: Missing Authorization

    CVE-2026-119707SonicJs-Org

    SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /api/content write routes that only check coarse role labels. Authenticated authors or editors can use a bearer JWT or API key to create, modify, publish, or soft-