sonicjs vulnerabilities

CVEs whose affected-version data names the sonicjs package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119707High· 7.1PoC

1w ago

SonicJS through 3.0.0 Missing Authorization in Content Write API

SonicJS through 3.0.0 contains a missing authorization vulnerability in the /api/:collection and /api/content write routes that only check coarse role labels. Authenticated authors or editors can use a bearer JWT or API key to create, mo…

▾ MidnightSonicJs-Org · sonicjsEPSS 0.31%via CVEORG