Skip to content
OpenAdvisories

Package · npm

@haxtheweb/open-apis

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-48996

    Unauthenticated Disclosure of PSU HAX CMS Site Listings via haxPsuUsage API Endpoint

    HAX open-apis provides microservice apis for HAX webcomponents repo that are shared infrastructure calls. An unauthenticated information disclosure vulnerability exists in the Penn State University deployment of the HAX content management system via the `haxP…

    haxtheweb issues @haxtheweb/open-apis npm