CVE-2026-25939
1 advisory.
npm/fuxa-server CVE-2026-25939: critical
FUXA Unauthenticated Remote Arbitrary Scheduler Write
Action: Upgrade fuxa-server to 1.2.11 or later.
npm i fuxa-server@1.2.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.8 | 1.2.11 | - |
Fixed versions
| 1.2.11 |
Sources
- osv: GHSA-c869-jx4c-q5fc
- https://github.com/frangoteam/FUXA/security/advisories/GHSA-c869-jx4c-q5fc
- https://nvd.nist.gov/vuln/detail/CVE-2026-25939
- https://github.com/frangoteam/FUXA/pull/2174
- https://github.com/frangoteam/FUXA/commit/5782b35117a9bd14ffcb881f8dfb8c6680157d9b
- https://github.com/frangoteam/FUXA/commit/aced6ad0b6089eea4e5cef51c0a88bf4f308d45f
- https://github.com/frangoteam/FUXA
- https://github.com/frangoteam/FUXA/releases/tag/v1.2.11
CVE-2026-25939 · published · modified · JSON