HA
Product
@haxtheweb/open-apis
by haxtheweb · last CVE Jun 5, 2026
1
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add @haxtheweb/open-apis to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-46391
8.7
0%
Jun 5
HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis
Affected: >= 9.0.1, < 26.0.0
Showing 1