{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.0.0-alpha.63"}],"component":"@dadigua/hyperchat","cve_ids":["CVE-2026-7223"],"ecosystem":"npm","epss":0.00278,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-r2jq-4h3x-rfj6","id":"tcs_01M5KG7N40RQAQCGDMMAGTKBZM","modified_at":"2026-05-06T20:11:26.504027Z","published_at":"2026-04-28T06:30:29Z","references":["https://osv.dev/vulnerability/GHSA-r2jq-4h3x-rfj6","https://nvd.nist.gov/vuln/detail/CVE-2026-7223","https://github.com/BigSweetPotatoStudio/HyperChat/issues/142","https://github.com/BigSweetPotatoStudio/HyperChat","https://vuldb.com/submit/802265","https://vuldb.com/vuln/359823","https://vuldb.com/vuln/359823/cti"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-r2jq-4h3x-rfj6","url":"https://osv.dev/vulnerability/GHSA-r2jq-4h3x-rfj6"}],"summary":"BigSweetPotatoStudio HyperChat has a Server-Side Request Forgery issue"}