npm/@powersync/service-core CVE-2026-30870: medium 6.5, EPSS 0.23%
PowerSync: Some sync filters ignored on 1.20.0 using `config.edition: 3`
Action: Upgrade @powersync/service-core to 1.20.1 or later.
npm i @powersync/service-core@1.20.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.20.0 | 1.20.1 | - |
Fixed versions
| 1.20.1 |
Sources
- osv: GHSA-q6wc-xx4m-92fj
- https://github.com/powersync-ja/powersync-service/security/advisories/GHSA-q6wc-xx4m-92fj
- https://nvd.nist.gov/vuln/detail/CVE-2026-30870
- https://github.com/powersync-ja/powersync-service
CVE-2026-30870 · published · modified · JSON