npm/hydrooj CVE-2026-55617: medium, EPSS 0.47%
Hydro: Insufficient session expiration when recreating sessions
Action: Upgrade hydrooj to 5.0.2 or later.
npm i hydrooj@5.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.10.4 | 5.0.2 | - |
Fixed versions
| 5.0.2 |
Sources
- osv: GHSA-94jp-7776-qj6q
- https://github.com/hydro-dev/Hydro/security/advisories/GHSA-94jp-7776-qj6q
- https://github.com/hydro-dev/Hydro/pull/1173
- https://github.com/hydro-dev/Hydro/commit/8450390fcce5f7dc3f11c43a14f1d76dbb949a0d
- https://github.com/hydro-dev/Hydro/commit/8d76be8f0b83d911bf7671962b0467e9d4b5719a
- https://github.com/hydro-dev/Hydro
CVE-2026-55617 · published · modified · JSON