Vulnerability	Vulnerable Version
H Denial of Service (DoS) apostrophe is a content management system (CMS) for Node.js. It supports in-context editing, schema-driven content types, flexible widgets and a great deal more. This module contains everything necessary to build a website with ApostropheCMS. Affected versions of this package are vulnerable to Denial of Service (DoS). The `apostrophe-jobs` module sets a callback for incoming jobs and doesn't clear it regardless of its status. This causes the server to accumulate callbacks, allowing an attacker to start a large number of jobs and exhaust system memory. How to fix Denial of Service (DoS)? Upgrade `apostrophe` to version 2.97.1 or higher.	<2.97.1
M Open Redirect apostrophe is a content management system (CMS) for Node.js. It supports in-context editing, schema-driven content types, flexible widgets and a great deal more. This module contains everything necessary to build a website with ApostropheCMS. Affected versions of this package are vulnerable to Open Redirect. It was possible to convince Apostrophe to redirect to a third-party website by appending an escaped URL with a trailing `/` added at the end. How to fix Open Redirect? Upgrade `apostrophe` to version 2.92.0 or higher.	<2.92.0

Denial of Service (DoS)

apostrophe is a content management system (CMS) for Node.js. It supports in-context editing, schema-driven content types, flexible widgets and a great deal more. This module contains everything necessary to build a website with ApostropheCMS.

Affected versions of this package are vulnerable to Denial of Service (DoS). The apostrophe-jobs module sets a callback for incoming jobs and doesn't clear it regardless of its status. This causes the server to accumulate callbacks, allowing an attacker to start a large number of jobs and exhaust system memory.

How to fix Denial of Service (DoS)?

Upgrade apostrophe to version 2.97.1 or higher.

<2.97.1

Open Redirect

Affected versions of this package are vulnerable to Open Redirect. It was possible to convince Apostrophe to redirect to a third-party website by appending an escaped URL with a trailing / added at the end.

How to fix Open Redirect?

Upgrade apostrophe to version 2.92.0 or higher.

<2.92.0

Go back to all versions of this package