Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-105863 1 Payloadcms 1 Payload 2026-10-15 9.4 Critical
Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custom field option that maps a field to a reserved authentication claim name can place unintended values in the authentication token issued at login. This issue is fixed in version 3.90.0.