@payloadcms/plugin-stripe vulnerabilities

CVEs whose affected-version data names the @payloadcms/plugin-stripe package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-105848Medium· 6.4

today

Payload is a free and open source headless content management system

Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can reach the enabled optional Stripe REST pr…

▾ Sunlitpayloadcms · @payloadcms/plugin-stripevia NVD