apostrophecms vulnerabilities and fixes

Recent CVEs affecting apostrophecms, with upgrade or downgrade steps. 6 tracked.

apostrophecms has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-04-15. Highest priority: CVE-2026-35569 (score 41/100).

• CVE-2026-35569 HIGH 8.7 UPGRADE ApostropheCMS is an open-source Node.js content management system
• CVE-2026-39857 MEDIUM 5.3 UPGRADE ApostropheCMS is an open-source Node.js content management system
• CVE-2026-33877 LOW 3.7 UPGRADE ApostropheCMS is an open-source Node.js content management system
• CVE-2026-33889 MEDIUM 5.4 UPGRADE ApostropheCMS is an open-source Node.js content management system
• CVE-2026-33888 MEDIUM 5.3 UPGRADE ApostropheCMS is an open-source Node.js content management system
• CVE-2026-40186 MEDIUM 6.1 DOWNGRADE UPGRADE ApostropheCMS is an open-source Node.js content management system

FAQ

How do I fix apostrophecms vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is apostrophecms being exploited right now?

None of the tracked apostrophecms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which apostrophecms CVE should I patch first?

CVE-2026-35569 currently ranks highest (41/100): ApostropheCMS is an open-source Node.js content management system.

RSS feed for apostrophecms · ← Back to latest CVEs