@payloadcms/drizzle (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package @payloadcms/drizzle, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (1)

• CVE-2026-25544 — CVSS 9.8 (critical): Payload is a free and open source headless content management system. Prior to 3.73.0, when querying JSON or richText fields, user input…