CVE-2026-76969
1 advisory.
npm/@sap/cds-mtxs CVE-2026-76969: critical 9.4
@sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)
Action: Upgrade @sap/cds-mtxs to 1.18.4 or later.
npm i @sap/cds-mtxs@4.0.3npm i @sap/cds-mtxs@3.9.7npm i @sap/cds-mtxs@2.7.7npm i @sap/cds-mtxs@1.18.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.1 | 4.0.3 | - |
| 3.0.1 | 3.9.7 | - |
| 2.0.2 | 2.7.7 | - |
| 0 | 1.18.4 | - |
Fixed versions
| 4.0.3 | 3.9.7 | 2.7.7 | 1.18.4 |
Sources
- osv: GHSA-955m-rr6m-2f9v
- https://nvd.nist.gov/vuln/detail/CVE-2026-76969
- https://me.sap.com/notes/3798315
- https://url.sap/sapsecuritypatchday
CVE-2026-76969 · published · modified · JSON