CVE-2026-68541

UNKNOWN 0.0

PolicyPress: Sensitive content disclosed via CSS-only web redaction and insecure starter workflow defaults

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

PolicyPress is a compliance policy management tool for small and mid-size teams. Prior to version 1.4.1, sensitive content is disclosed via CSS-only web redaction and insecure starter workflow defaults. This issue has been patched in version 1.4.1.

CWE	CWE-200 CWE-390
Vendor	sc2in
Product	policypress
Published	Nov 13, 2026

Stay Ahead of the Next One

Get instant alerts for sc2in policypress

Be the first to know when new unknown vulnerabilities affecting sc2in policypress are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

sc2in / PolicyPress

< 1.4.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/sc2in/PolicyPress/security/advisories/GHSA-j557-r6p7-8r3m github.com: https://github.com/sc2in/PolicyPress/commit/131de241014c17c30130d83151da840d005d55d8 github.com: https://github.com/sc2in/PolicyPress/releases/tag/v1.4.1