Unjs vulnerabilities

Products

• Ipx 6
• Unhead 3

Newest

• slican ipx SQL Injection in WebCTI CVE-2026-63314 8.7 HighOctober 15, 2026
• slican cct-1668, cxs-0424, ipx +1 more +3 more Inadequate Encryption Strength in Slican telephone exchanges CVE-2026-35088 8.2 HighOctober 15, 2026
• slican ipx Plaintext storage of a password in WebCTI CVE-2026-63315 8.2 HighAugust 29, 2026
• slican cct-1668, cxs-0424, ipx +1 more +3 more Use of Weak Credentials in Slican telephone exchanges CVE-2026-35089 8.7 HighMay 27, 2026
• slican cct-1668, cxs-0424, ipx +2 more +4 more Authentication Bypass in Slican telephone exchanges CVE-2026-35087 9.3 CriticalMay 27, 2026
• unjs unhead Unhead has a hasDangerousProtocol() bypass via leading-zero padded HTML entities in useHeadSafe() CVE-2026-39315 Fix available 6.1 MediumApril 9, 2026
• unjs defu defu: Prototype pollution via `__proto__` key in defaults argument CVE-2026-35209 Fix available 7.5 HighApril 4, 2026
• unjs unhead Unhead has a Bypass of URI Scheme Sanitization in makeTagSafe via Case-Sensitivity CVE-2026-31873 Fix available 0.0 NoneMarch 12, 2026
• unjs unhead Unhead has a XSS bypass in `useHeadSafe` via attribute name injection and case-sensitive protocol check CVE-2026-31860 Fix available 5.3 MediumMarch 12, 2026
• unjs nanotar nanotar is vulnerable to path traversal in parseTar() and parseTarGzip() CVE-2025-69874 9.8 CriticalFebruary 11, 2026
• unjs ipx IPX is Vulnerable to Path Traversal via Prefix Matching Bypass CVE-2025-54387 Fix available 6.9 MediumAugust 4, 2025