Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-57579
  • github.com/alchemycms/alchemy_cms
Alchemy: Unauthenticated nested page API leaks restricted & unpublished content 14 Sep
  • Fix available
  • Severity - 7.5 (High)
CVE-2026-86777
  • github.com/alchemycms/alchemy_cms
AlchemyCMS before 7.4.16 and 8.x before 8.3.6 Missing Authorization on GET /api/nodes 09 Sep
  • Fix available
  • Severity - 6.9 (Medium)
CVE-2026-23885
  • github.com/alchemycms/alchemy_cms
AlchemyCMS has Authenticated Remote Code Execution (RCE) via eval injection in ResourcesHelper 19 Jan
  • Fix available
  • Severity - 6.4 (Medium)
CVE-2018-18307
  • github.com/alchemycms/alchemy_cms
See record for full details 16 Oct 2018
  • No fix available
  • Severity - 6.1 (Medium)