[ Vendor · 1 CVEs ]

SonicJs-Org

CVEs affecting SonicJs-Org published in the last 30 days, plus any SonicJs-Org CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-119707 30 Oct 2026 CVSS 7.1 SonicJs-Org sonicjsSonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /api/content write routes that only check coarse…