Skip to content
OpenAdvisories

Package · npm

sse-channel

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.6
    CVE-2026-44217

    sse-channel: SSE Injection via unsanitized event fields

    sse-channel is an SSE-implementation which can be used to any node.js http request/response stream. Prior to 4.0.1, implementations that allow user-provided values to be passed to event, retry or id fields are susceptible to event spoofing, where an attacker …

    rexxars sse-channel sse-channel npm