HIGHnpm
GHSA-4fg7-f244-3j49· CVE-2026-46391HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis
Modified: 9/10/2026
package
npm/@haxtheweb/open-apis
pkg:npm/%40haxtheweb/open-apis
MEDIUM5.3npm
GHSA-fvx2-x7ff-fc56· CVE-2025-48996Unauthenticated Disclosure of PSU HAX CMS Site Listings via haxPsuUsage API Endpoint
Modified: 6/5/2025