npm CVE Archive

9router CVE Vulnerabilities

All known CVEs affecting 9router. Kodem’s runtime-powered SCA reveals which are actually reachable in your application.

Known vulnerabilities
CVE
Summary
Severity
CVE-2026-49353
9router has an Incomplete Fix: Local-Only Access Gate Bypass in 9router via…
High
CVE-2026-49352
9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass
Critical
CVE-2026-46339
9router: Unauthenticated Remote Code Execution via unprotected MCP custom…
Critical
CVE-2026-5842
decolua 9router vulnerable to authorization bypass
Medium

Prioritize 9router vulnerabilities

Kodem Kai can identify which of these CVEs are reachable in your dependency tree and generate targeted fix recommendations.

Get a demo →

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo