db-d1-sqlite vulnerabilities

CVEs whose affected-version data names the db-d1-sqlite package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-105856High· 8.6

today

Payload is a free and open source headless content management system

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enab…

▾ Twilightpayloadcms · payloadvia NVD