{"affected":[{"product":"PolicyPress","source":"CNA: GitHub_M","vendor":"sc2in","versions":[{"status":"affected","version":"< 1.4.1"}]}],"cveId":"CVE-2026-68541","cwes":["CWE-200","CWE-390"],"description":"PolicyPress is a compliance policy management tool for small and mid-size teams. Prior to version 1.4.1, sensitive content is disclosed via CSS-only web redaction and insecure starter workflow defaults. This issue has been patched in version 1.4.1.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.2,"severity":"medium","source":"CNA: GitHub_M","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1794596746506,"publishedAt":1794596746506,"references":[{"source":"CNA: GitHub_M","tags":["x_refsource_CONFIRM"],"url":"https://github.com/sc2in/PolicyPress/security/advisories/GHSA-j557-r6p7-8r3m"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/sc2in/PolicyPress/commit/131de241014c17c30130d83151da840d005d55d8"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/sc2in/PolicyPress/releases/tag/v1.4.1"}],"remediation":[],"revision":"365198ee13487071abef6f39ba3a2549298fc1f6b1660c4abcfd71eae1e89715","sources":[{"modifiedAt":1794596746506,"name":"CNA: GitHub_M","retrievedAt":1794600617002,"url":"https://www.cve.org/CVERecord?id=CVE-2026-68541"}],"ssvc":null,"status":"published","title":"PolicyPress: Sensitive content disclosed via CSS-only web redaction and insecure starter workflow defaults","updatedAt":1794600617002}