@haxtheweb/open-apis vulnerabilities (npm)

2 vulnerabilities.

• @haxtheweb/open-apis npm HAX open-apis: Credential Theft via Server-Side Request Forgery (SSRF) in open-apis CVE-2026-46391 Public exploitFix available 8.7 HighMay 19, 2026
• @haxtheweb/open-apis npm Unauthenticated Disclosure of PSU HAX CMS Site Listings via haxPsuUsage API Endpoint CVE-2025-48996 5.3 MediumJune 2, 2025