CVE-2026-27369

Publication date

2026-03-05 05:53:55

Family

Patchstack

State

PUBLISHED

Description

Deserialization of Untrusted Data vulnerability in BoldThemes Celeste celeste allows Object Injection.This issue affects Celeste: from n/a through <= 1.3.6.