@haxtheweb/open-apis vulnerabilities

1 known vulnerability in @haxtheweb/open-apis from Haxtheweb. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  @haxtheweb/open-apis: Permissive List of Allowed Inputs

  CVE-2026-46391Jun 5, 2026Haxtheweb

  HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 9.0.1 and prior to version 26.0.0 of @haxtheweb/open-apis, multiple functions conduct substring-only matching to validate hostnames to which basic authorization should be