Description
No description available.
Recommendation
Update the @cubejs-backend/api-gateway package to the latest compatible version. Followings are version details:
- Affected version(s): >= 0.11.0, <= 0.11.16
- Patched version(s): 0.11.17
References
Could your website be exposed too?
SmartScanner can check your website for Default Express middleware security check is ignored in production and gives you actionable findings to investigate.
Start a free scanRelated Issues
- @asymmetric-effort/specifyjs: Production console warnings may leak internal framework state - Vulnerability
- Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler - CVE-2025-27098
- devbridge-autocomplete has XSS in its default formatters: formatGroup and formatResult fail to escape HTML in untrusted - Vulnerability
- survey-pdf Upgraded jsPDF Version Due to Security Vulnerability - CVE-2026-25630
You might also like:
See something that needs correcting? Let us knowUpdated January 09, 2023