CVE-2026-54155
1 advisory.
npm/node-opcua CVE-2026-54155: high 7.7, EPSS 0.42%
node-opcua missing nonce verification in UserNameIdentityToken authentication
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.165.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-mq36-523m-x7vv
- https://github.com/node-opcua/node-opcua/security/advisories/GHSA-mq36-523m-x7vv
- https://github.com/node-opcua/node-opcua
CVE-2026-54155 · published · modified · JSON