{"action":"Upgrade fuxa-server to 1.2.11 or later.","affected":[{"fixed":"1.2.11","introduced":"1.2.8"}],"component":"fuxa-server","cve_ids":["CVE-2026-25939"],"ecosystem":"npm","epss":0.12716,"exploited":false,"fixed_versions":["1.2.11"],"ghsa_id":"GHSA-c869-jx4c-q5fc","id":"tcs_01M5KFJ5SJ73Z7AGPDXNDD5M34","modified_at":"2026-02-10T03:03:44.885103Z","published_at":"2026-02-10T00:28:28Z","references":["https://osv.dev/vulnerability/GHSA-c869-jx4c-q5fc","https://github.com/frangoteam/FUXA/security/advisories/GHSA-c869-jx4c-q5fc","https://nvd.nist.gov/vuln/detail/CVE-2026-25939","https://github.com/frangoteam/FUXA/pull/2174","https://github.com/frangoteam/FUXA/commit/5782b35117a9bd14ffcb881f8dfb8c6680157d9b","https://github.com/frangoteam/FUXA/commit/aced6ad0b6089eea4e5cef51c0a88bf4f308d45f","https://github.com/frangoteam/FUXA","https://github.com/frangoteam/FUXA/releases/tag/v1.2.11"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-c869-jx4c-q5fc","url":"https://osv.dev/vulnerability/GHSA-c869-jx4c-q5fc"},{"source":"nvd","source_id":"CVE-2026-25939","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25939"}],"summary":"FUXA Unauthenticated Remote Arbitrary Scheduler Write"}