CVE-2026-45013 - Apostrophe has a Weak Password Recovery Mechanism for Forgotten Password and Improper Input Validation
CVE ID :CVE-2026-45013 Published : June 12, 2026, 9:16 p.m. | 1 hour, 51 minutes ago Description :ApostropheCMS is an open-source Node.js content management system. Versions up to and including 4.29.0 have a password reset flow that constructs the reset URL using `req.hostname`, which is...