high7.7
CVE-2026-100105
A user with permission to edit contact points but not their protected fields can change protected settings, such as a contact point's destination URL, by switc…
Impact
A user with permission to edit contact points but not their protected fields can change protected settings, such as a contact point's destination URL, by switching an integration to a legacy schema version, which can expose stored credentials and redirect alert notifications (incorrect authorization).
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.