HIGH7.5npm
GHSA-45c3-c4c3-8rqg· CVE-2023-31716FUXA vulnerable to Local File Inclusion
Modified: 9/25/2024
package
npm/@frangoteam/fuxa
pkg:npm/%40frangoteam/fuxa
CRITICAL9.8npm
GHSA-4r4r-4jp4-wwf9· CVE-2025-69985FUXA has JWT Authentication Bypass via HTTP Referer header spoofing
Modified: 2/26/2026
HIGH7.5npm
GHSA-9vp3-7qwq-83r9· CVE-2021-45851Server-Side Request Forgery in FUXA
Modified: 11/8/2023
HIGH8.1npm
GHSA-c8m8-3jcr-6rj5· CVE-2025-69971FUXA has a hardcoded fallback JWT signing secret
Modified: 5/11/2026
HIGHnpm
GHSA-p69w-mmfv-xrfj· CVE-2026-43945FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection
Modified: 9/10/2026
CRITICAL9.8npm
GHSA-r87q-fq37-pvr6· CVE-2023-33831A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA
Modified: 11/8/2023