Skip to content
OpenAdvisories

Package · npm

@farmfe/core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-56647

    @farmfe/core is Missing Origin Validation in WebSocket

    npm @farmfe/core before 1.7.6 is Missing Origin Validation in WebSocket. The development (hot module reloading) server does not validate origin when connecting to a WebSocket client. This allows attackers to surveil developers running Farm who visit their web…

    @farmfe/core npm