CRITICAL npm
GHSA-32cc-x95p-fxcg · CVE-2026-25894 FUXA Unauthenticated Remote Code Execution via Hardcoded JWT Secret in Default Configuration
Modified: 2/10/2026
package
npm / fuxa-server
pkg:npm/fuxa-server
CRITICAL 9.8 npm
GHSA-5r63-q8hg-p8qx · CVE-2025-69983 FUXA allows Remote Code Execution (RCE) via the project import functionality.
Modified: 2/11/2026
HIGH npm
GHSA-68m5-5w2h-h837 · CVE-2026-25951 FUXA Affected by a Path Traversal Sanitization Bypass
Modified: 2/22/2026
HIGH npm
GHSA-7g56-fwxj-cm23 · CVE-2025-69981 FUXA contains an Unrestricted File Upload vulnerability
Modified: 2/10/2026
CRITICAL npm
GHSA-88qh-cphv-996c · CVE-2026-25895 FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API
Modified: 2/22/2026
CRITICAL npm
GHSA-c5gq-4h56-4mmx · CVE-2026-25751 FUXA Unauthenticated Exposure of Plaintext Database Credentials
Modified: 2/6/2026
CRITICAL npm
GHSA-c869-jx4c-q5fc · CVE-2026-25939 FUXA Unauthenticated Remote Arbitrary Scheduler Write
Modified: 2/10/2026
HIGH npm
GHSA-fwcm-rqvw-j3p7 · CVE-2026-43946 FUXA has an unauthenticated arbitrary tag value disclosure via /api/getTagValue
Modified: 5/26/2026
CRITICAL npm
GHSA-ggxw-g3cp-mgf8 · CVE-2026-25752 FUXA Unauthenticated Remote Arbitrary Device Tag Write
Modified: 2/6/2026
CRITICAL 9.8 npm
GHSA-p46g-8c3q-89p2 · CVE-2023-31719 FUXA SQL Injection vulnerability
Modified: 11/8/2023
HIGH npm
GHSA-r5m2-fqcf-qrf7 · CVE-2025-69970 FUXA contains an insecure default configuration vulnerability
Modified: 2/10/2026
HIGH npm
GHSA-rg3m-cfq7-g6h6 · CVE-2026-43947 FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass
Modified: 5/27/2026
CRITICAL npm
GHSA-v4p5-w6r3-2x4f · CVE-2026-25938 FUXA Unauthenticated Remote Code Execution in Node-RED Integration
Modified: 2/10/2026
HIGH 7.5 npm
GHSA-v9q5-9crp-92f9 · CVE-2023-31717 FUXA SQL Injection vulnerability
Modified: 11/8/2023
CRITICAL npm
GHSA-vwcg-c828-9822 · CVE-2026-25893 FUXA Unauthenticated Remote Code Execution via Admin JWT Minting
Modified: 2/10/2026
HIGH 7.5 npm
GHSA-wwfj-h843-3hrq · CVE-2023-31718 FUXA local file inclusion vulnerability
Modified: 11/8/2023