CVE-2025-56647
1 advisory.
npm/@farmfe/core CVE-2025-56647: medium 6.5
@farmfe/core is Missing Origin Validation in WebSocket
Action: Upgrade @farmfe/core to 1.7.6 or later.
npm i @farmfe/core@1.7.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.6 | - |
Fixed versions
| 1.7.6 |
Sources
- osv: GHSA-p773-8mf4-rjm5
- https://nvd.nist.gov/vuln/detail/CVE-2025-56647
- https://github.com/farm-fe/farm/issues/2168
- https://github.com/farm-fe/farm/commit/83342ef06e0aea37270950fd8c930422c4df0679
- https://gist.github.com/R4356th/d4372c6f83275d583c180c0e7d7332af
- https://github.com/farm-fe/farm
CVE-2025-56647 · published · modified · JSON