All products

@delmaredigital/payload-puck

npm · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
@delmaredigital/payload-puc is missing authorization on /api/puck/* CRUD endpoints allows unauthenticated access to Puck-registered collectionsCVE-2026-39397 · GHSA-65W6-PF7X-5G85 @delmaredigital/payload-puck npm Critical Fix reported