Skip to content
Threat Feed
Subscribe

Product

SonicJS (<= 3.0.0)

1 brief RSS
high advisory

SonicJS: Missing authorization in API write routes (CVE-2026-119707)

SonicJS versions through 3.0.0 contain a missing authorization vulnerability in API routes that allows authenticated Authors or Editors to bypass document-level ACLs and modify content owned by other users.

SonicJS
1t 1c