tocsin

CVE-2026-59160

1 advisory.

npm/@yeger/turbo-graph CVE-2026-59160: high 8.8, EPSS 0.49%

@yeger/turbo-graph: Unauthenticated Network-Exposed Task Execution via /api/run

Action: Upgrade @yeger/turbo-graph to 2.8.12 or later.

npm i @yeger/turbo-graph@2.8.12

Affected

introducedfixedlast affected
02.8.12-

Fixed versions

2.8.12

Sources

CVE-2026-59160 · published · modified · JSON