Known Vulnerabilities for Cross-fetch by Cross-fetch Project
Listed below are 1 of the newest known vulnerabilities associated with "Cross-fetch" by "Cross-fetch Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-54359 json | MISP contains an insecure default configuration in which the Security.check_sec_fetch_site_header control is disabled. When t... | Not Provided | 2026-06-12 | 2026-06-15 |
| CVE-2026-54264 json | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other lang... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-53607 json | ApostropheCMS is an open-source Node.js content management system. In versions up to and including 4.30.0, when `prettyUrls: ... | Not Provided | 2026-06-12 | 2026-06-15 |
| CVE-2026-52843 json | Lightpanda is a headless browser designed for AI and automation. Prior to 0.2.9, Lightpanda fetch() and XMLHttpRequest uncond... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-49215 json | Symfony UX is a JavaScript ecosystem for Symfony. From 2.22.0 until 2.36.0 and 3.1.0, Symfony\UX\LiveComponent\EventListener\... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-46701 json | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.4.5, the MCP SSE server defaults to an empty ... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-46511 json | HAX CMS helps manage microsite universe with PHP or NodeJs backends. Prior to version 26.0.0, an attack chain utilizing Store... | Not Provided | 2026-06-05 | 2026-06-08 |
| CVE-2026-45781 json | The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers. Prior to 1.7.9, OCI owne... | Not Provided | 2026-05-14 | 2026-05-16 |
| CVE-2026-45610 json | WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a cross-site request forgery vulnerability on the... | Not Provided | 2026-05-29 | 2026-05-29 |
| CVE-2026-45021 json | Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs. Prior to 2.7.25, 2.9.15... | Not Provided | 2026-05-28 | 2026-05-28 |