delmaredigital
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| payload-puck | 1 | – | Apr 7, 2026 |
Exploited and recent CVEs
- CVE-2026-39397 @delmaredigital/payload-puc is missing authorization on /api/puck/* CRUD endpoints allows unauthenticated access to Puck-registered collections 0.4%