For the Plone Foundation, security is a process that we take seriously, and we have the track record to prove it.
Security: plone/plone.restapi
Security
SECURITY.md
-
Information disclosure due to wrong permission checkGHSA-qp9m-v45c-4g3p published
Aug 31, 2026 by mauritsvanreesModerate -
Unauthenticated Reflective Method Invocation via the REST API @search metadata_fields ParameterGHSA-r3g9-vgf8-vv35 published
Aug 31, 2026 by mauritsvanreesModerate -
Stored XSS by spoofing mime typeGHSA-8rqh-vxpr-x77p published
Jun 5, 2026 by mauritsvanreesModerate -
Stored Cross Site Scripting with SVG image in user portraitGHSA-hc5c-r8m5-2gfh published
Sep 21, 2023 by mauritsvanreesLow
Learn more about advisories related to plone/plone.restapi in the GitHub Advisory Database