CVE-2026-104150
1 advisory.
npm/@adonisjs/http-server CVE-2026-104150: high 8.7
AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity
Action: Upgrade @adonisjs/http-server to 8.2.2 or later.
npm i @adonisjs/http-server@9.1.1npm i @adonisjs/http-server@8.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.0.0 | 9.1.1 | - |
| 0 | 8.2.2 | - |
Fixed versions
| 9.1.1 | 8.2.2 |
Sources
- osv: GHSA-524c-h47v-m3h8
- nvd: CVE-2026-104150
- https://github.com/adonisjs/http-server/security/advisories/GHSA-524c-h47v-m3h8
- https://github.com/adonisjs/http-server/commit/86af38ca861528f673dcac6a4806197de038d1f7
- https://github.com/adonisjs/http-server/commit/d8c749aa9f66d5d214bad1cad727264aef4be727
- https://github.com/adonisjs/http-server
- https://github.com/adonisjs/http-server/releases/tag/v8.2.2
- https://github.com/adonisjs/http-server/releases/tag/v9.1.1
CVE-2026-104150 · published · modified · JSON