9router vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-55501High9router: 9router: Login brute-force protection bypass via spoofed X-Forwarded-For header CVE-2026-55500Critical9router: 9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database…GHSA-VJC7-JRH9-9J86Critical9router: 9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats CVE-2026-49353High9router: 9router has an Incomplete Fix: Local-Only Access Gate Bypass in 9router via Host Header SpoofING CVE-2026-49352Critical9router: 9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass CVE-2026-59800Critical9router: 9router: Missing Authorization and OS Command Injection CVE-2026-46339Critical9router: 9router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes CVE-2026-5842Medium9router: decolua 9router vulnerable to authorization bypass

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo