Files

1 line
718 B
JSON

{"ghsa": "GHSA-rg3m-cfq7-g6h6", "cve": "CVE-2026-43947", "repo": "frangoteam/FUXA", "severity": "high", "cwes": ["CWE-863"], "summary": "FUXA Vulnerable to Unauthenticated Remote Code Execution via Script Test Mode Authorization Bypass", "fix_commit": "78534da61a91613712b44bb63c8d7da8c5df5ca4", "parent_commit": "61b5cf41af63a60749ac39a285be66b693d19b94", "vuln_files": ["server/api/command/index.js", "server/integrations/node-red/index.js"], "vuln_lines": {"server/api/command/index.js": [81], "server/integrations/node-red/index.js": [155, 157, 158, 159, 160]}, "published": "2026-05-26T23:44:52Z", "source_files": 40, "scope_dirs": ["server/api/command", "server/integrations/node-red", "server/runtime/scripts"]}