CVE-2026-27192
1 advisory.
npm/@feathersjs/authentication-oauth CVE-2026-27192: high, EPSS 0.34%
Feathers has an origin validation bypass via prefix matching
Action: Upgrade @feathersjs/authentication-oauth to 5.0.40 or later.
npm i @feathersjs/authentication-oauth@5.0.40Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.40 | - |
Fixed versions
| 5.0.40 |
Sources
- osv: GHSA-mp4x-c34x-wv3x
- https://github.com/feathersjs/feathers/security/advisories/GHSA-mp4x-c34x-wv3x
- https://nvd.nist.gov/vuln/detail/CVE-2026-27192
- https://github.com/feathersjs/feathers/commit/ee19a0ae9bc2ebf23b1fe598a1f7361981b65401
- https://github.com/feathersjs/feathers
- https://github.com/feathersjs/feathers/releases/tag/v5.0.40
CVE-2026-27192 · published · modified · JSON