CVE-2026-5842
1 advisory.
npm/9router CVE-2026-5842: high 7.3, EPSS 0.54%
decolua 9router vulnerable to authorization bypass
Action: Upgrade 9router to 0.3.75 or later.
npm i 9router@0.3.75Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.75 | - |
Fixed versions
| 0.3.75 |
Sources
- osv: GHSA-xrrh-p7f2-27vm
- https://nvd.nist.gov/vuln/detail/CVE-2026-5842
- https://github.com/decolua/9router/issues/431
- https://github.com/decolua/9router/issues/431#issuecomment-4140163867
- https://github.com/decolua/9router
- https://github.com/decolua/9router/releases/tag/v0.3.75
- https://github.com/deepcat1337/Free_Api_Exploit/tree/main
- https://vuldb.com/submit/790003
- https://vuldb.com/vuln/356298
- https://vuldb.com/vuln/356298/cti
CVE-2026-5842 · published · modified · JSON