OsVault/npm/fuxa-server
npm1 critical

fuxa-server

14 known vulnerabilities · 1 critical · 2 high

CVE-2026-25752

FUXA Unauthenticated Remote Arbitrary Device Tag Write

Published Feb 5, 2026
CVE-2023-31719CRITICAL

FUXA SQL Injection vulnerability

Published Sep 22, 2023
CVE-2023-31717HIGH

FUXA SQL Injection vulnerability

Published Sep 22, 2023
CVE-2026-25951

FUXA Affected by a Path Traversal Sanitization Bypass

Published Feb 10, 2026
CVE-2026-25895

FUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload API

Published Feb 5, 2026
CVE-2025-69981

FUXA contains an Unrestricted File Upload vulnerability

Published Feb 3, 2026
CVE-2026-25751

FUXA Unauthenticated Exposure of Plaintext Database Credentials

Published Feb 5, 2026
CVE-2026-25939

FUXA Unauthenticated Remote Arbitrary Scheduler Write

Published Feb 10, 2026
CVE-2026-25938

FUXA Unauthenticated Remote Code Execution in Node-RED Integration

Published Feb 10, 2026
CVE-2026-25893

FUXA Unauthenticated Remote Code Execution via Admin JWT Minting

Published Feb 5, 2026
CVE-2025-69971

FUXA contains a hard-coded credential vulnerability

Published Feb 3, 2026
CVE-2025-69970

FUXA contains an insecure default configuration vulnerability

Published Feb 3, 2026
CVE-2025-69983

FUXA allows Remote Code Execution (RCE) via the project import functionality.

Published Feb 3, 2026
CVE-2023-31718HIGH

FUXA local file inclusion vulnerability

Published Sep 22, 2023
Check your entire dependency tree at onceRun dependency scan →