CVE-2026-29792
1 advisory.
npm/@feathersjs/authentication-oauth CVE-2026-29792: critical, EPSS 0.65%
Feathers has an OAuth Callback Account Takeover issue
Action: Upgrade @feathersjs/authentication-oauth to 5.0.42 or later.
npm i @feathersjs/authentication-oauth@5.0.42Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.42 | - |
Fixed versions
| 5.0.42 |
Sources
- osv: GHSA-wg9x-qfgw-pxhj
- https://github.com/feathersjs/feathers/security/advisories/GHSA-wg9x-qfgw-pxhj
- https://nvd.nist.gov/vuln/detail/CVE-2026-29792
- https://github.com/feathersjs/feathers
CVE-2026-29792 · published · modified · JSON