CVE-2025-24876
1 advisory.
npm/@sap/approuter CVE-2025-24876: high 8.1
Authentication bypass in @sap/approuter
Action: Upgrade @sap/approuter to 16.7.2 or later.
npm i @sap/approuter@16.7.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.6.1 | 16.7.2 | - |
Fixed versions
| 16.7.2 |
Sources
- osv: GHSA-cpfx-964w-4jvp
- https://nvd.nist.gov/vuln/detail/CVE-2025-24876
- https://me.sap.com/notes/3567974
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news/february-2025.html
- https://www.npmjs.com/package/@sap/approuter?activeTab=versions
CVE-2025-24876 · published · modified · JSON