CVE-2026-49352
1 advisory.
npm/9router CVE-2026-49352: critical 9.8
9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass
Action: Upgrade 9router to 0.4.45 or later.
npm i 9router@0.4.45Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.21 | 0.4.45 | - |
Fixed versions
| 0.4.45 |
Sources
- osv: GHSA-jphh-m39h-6gwx
- https://github.com/decolua/9router/security/advisories/GHSA-jphh-m39h-6gwx
- https://github.com/decolua/9router
CVE-2026-49352 · published · modified · JSON