MEDIUM5.8npm
GHSA-m9g3-3g99-mhpx· CVE-2026-44214eventsource-encoder vulnerable to SSE event injection via unsanitized `event` and `id` fields
Modified: 6/8/2026
package
npm/eventsource-encoder
pkg:npm/eventsource-encoder
package
pkg:npm/eventsource-encoder
eventsource-encoder vulnerable to SSE event injection via unsanitized `event` and `id` fields
Modified: 6/8/2026