Frangoteam vulnerabilities
CVEs whose affected-version data names the Frangoteam package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-40063Medium· 5.3A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809)
A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to an information leak. An attacker can make an unauthenticated HTTP req…
CVE-2026-42922Critical· 9.8A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809)
A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an unauthenticated HTTP request to …
CVE-2026-42949Medium· 5.6A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): 1.3.2-2809)
A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to execute priviledged operation. An attacker can make an unauthenticated HTTP re…