{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.1.14-1243"}],"component":"fuxa-server","cve_ids":["CVE-2026-47720"],"ecosystem":"npm","epss":0.00641,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-h9fj-c2qr-76g2","id":"tcs_01M5KFTM9T9S0DC6BDSS4TGE6Y","modified_at":"2026-06-08T23:26:36.280906Z","published_at":"2026-06-08T23:06:43Z","references":["https://osv.dev/vulnerability/GHSA-h9fj-c2qr-76g2","https://github.com/frangoteam/FUXA/security/advisories/GHSA-h9fj-c2qr-76g2","https://github.com/frangoteam/FUXA"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-h9fj-c2qr-76g2","url":"https://osv.dev/vulnerability/GHSA-h9fj-c2qr-76g2"}],"summary":"FUXA has SQL Injection in its TDengine DAQ connector via backslash bypass of escapeTdString"}