CVE-2026-62328
1 advisory.
npm/9router CVE-2026-59801, CVE-2026-62327, CVE-2026-62328: critical 10
9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.4.41 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vjc7-jrh9-9j86
- https://github.com/decolua/9router/security/advisories/GHSA-vjc7-jrh9-9j86
- https://github.com/decolua/9router
CVE-2026-59801, CVE-2026-62327, CVE-2026-62328 · published · modified · JSON