Description
No description available.
Recommendation
Update the effect package to the latest compatible version. Followings are version details:
- Affected version(s): < 3.20.0
- Patched version(s): 3.20.0
References
Could your website be exposed too?
SmartScanner can check your website for Effect `AsyncLocalStorage` context lost/contaminated inside Effect fibers under concurrent load with RPC and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys - @tanstack/start-storage-context - CVE-2026-45321
- @anephenix/hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion - CVE-2026-73561
- LiquidJS's `{% render %}` tag silently bypasses per-render `ownPropertyOnly:true` via `Context.spawn()` - CVE-2026-44646
- Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host - CVE-2026-71319
You might also like:
See something that needs correcting? Let us knowUpdated March 25, 2026