npm/waku CVE-2026-49456: low 3.1, EPSS 0.40%
Waku has an Open Redirect via `unstable_redirect` Helper
Action: Upgrade waku to 1.0.0-beta.1 or later.
npm i waku@1.0.0-beta.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0-beta.1 | - |
Fixed versions
| 1.0.0-beta.1 |
Sources
- osv: GHSA-43fc-v873-qw85
- https://github.com/wakujs/waku/security/advisories/GHSA-43fc-v873-qw85
- https://github.com/wakujs/waku
- https://github.com/wakujs/waku/releases/tag/v1.0.0-beta.1
CVE-2026-49456 · published · modified · JSON