All products

@haxtheweb/open-apis

npm · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apisCVE-2026-46391 · GHSA-4FG7-F244-3J49 @haxtheweb/open-apis npm High Fix reported
Unauthenticated Disclosure of PSU HAX CMS Site Listings via haxPsuUsage API EndpointCVE-2025-48996 · GHSA-FVX2-X7FF-FC56 @haxtheweb/open-apis npm Medium No fix reported