agents vulnerabilities (npm)

3 vulnerabilities.

• agents npm Cloudflare Agents has a Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site GHSA-w5cr-2qhr-jqc5 Fix available 6.2 MediumFebruary 13, 2026
• agents npm Reflected Cross-Site Scripting (XSS) vulnerability in AI Playground site CVE-2026-1721 Fix available 6.2 MediumFebruary 13, 2026
• agents npm Insecure Direct Object Reference (IDOR) via Header-Based Email Routing CVE-2026-1664 Fix available 6.9 MediumFebruary 3, 2026