adonisjs has 3 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.6 (high).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.6
- Publish → KEV
- —
- Last 90 days
- 2 prev 1
Weakness classes
Products
- @adonisjs/bodyparser 1
- @adonisjs/http-server 1
- http-server 1
Worst active — by depth score
CVE-2026-104150High· 8.7AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework48CVE-2026-48795High· 8.6@adonisjs/bodyparser has an incomplete fix for CVE-2026-2575447CVE-2026-107718Medium· 6.1AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework34
adonisjs vulnerabilities
CVEs affecting adonisjs, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-104150High· 8.7AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.2 and 9.1.1, the regular expression returned by router.matchers.slug() contains adjacent greedy repetitions with overlapping character c…
CVE-2026-107718Medium· 6.1AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs without encodeURIComponent in the shared createURL() helper u…
CVE-2026-48795High· 8.6@adonisjs/bodyparser has an incomplete fix for CVE-2026-25754
@adonisjs/bodyparser has an incomplete fix for CVE-2026-25754