CVE-2026-47719
1 advisory.
npm/fuxa-server CVE-2026-47719: high 8.2, EPSS 0.59%
FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.1.14-1243 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-w86f-rf9w-h3x6
- https://github.com/frangoteam/FUXA/security/advisories/GHSA-w86f-rf9w-h3x6
- https://github.com/frangoteam/FUXA
- https://github.com/frangoteam/FUXA/releases/tag/v1.3.2
CVE-2026-47719 · published · modified · JSON