eventsource-encoder vulnerabilities (npm)

1 vulnerability.

• eventsource-encoder npm eventsource-encoder: SSE event injection via unsanitized event and id fields CVE-2026-44214 Fix available 5.8 MediumMay 8, 2026