CVE-2025-54137
1 advisory.
npm/@haxtheweb/haxcms-nodejs CVE-2025-54137: high 7.3, EPSS 0.39%
NodeJS version of the HAX CMS application is distributed with Default Secrets
Action: Upgrade @haxtheweb/haxcms-nodejs to 11.0.10 or later.
npm i @haxtheweb/haxcms-nodejs@11.0.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.0.10 | - |
Fixed versions
| 11.0.10 |
Sources
- osv: GHSA-5fpv-5qvh-7cf3
- https://github.com/haxtheweb/issues/security/advisories/GHSA-5fpv-5qvh-7cf3
- https://nvd.nist.gov/vuln/detail/CVE-2025-54137
- https://github.com/haxtheweb/haxcms-nodejs/commit/6dc2441c876350ca6fe9fbaecb058d92ef442869
- https://github.com/haxtheweb/haxcms-nodejs/blob/main/src/lib/HAXCMS.js#L1614
- https://github.com/haxtheweb/issues
CVE-2025-54137 · published · modified · JSON