CyberSecBulletin

Wasp-lang vulnerabilities

We track 1 vulnerability in Wasp-lang products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 9, 2025.

1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score

Latest Wasp-lang vulnerabilities

  • 8.2 High severity

    wasp: Incorrect Default Permissions

    CVE-2025-49006Wasp-lang

    Wasp (Web Application Specification) is a Rails-like framework for React, Node.js, and Prisma. Prior to version 0.16.6, Wasp authentication has a vulnerability in the OAuth authentication implementation (affecting only Keycloak with a specific config). Wasp cu