New: Corgea AI Pentesting — autonomous penetration testing in hours, not weeks
Start for Free
npm

9router

View on npm registry
5 Total advisories
5 Vulnerabilities
0 Malware

Vulnerabilities

HIGH 7.5
npm

CVE-2026-49353

9router has an Incomplete Fix: Local-Only Access Gate Bypass in 9router via Host Header SpoofING
CRITICAL 9.8
npm

CVE-2026-49352

9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass
UNKNOWN
npm

GHSA-g6g7-pvmx-m74p

9router: Missing Authorization and OS Command Injection
CRITICAL 10.0
npm

CVE-2026-46339

9router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes
HIGH 7.3
npm

CVE-2026-5842

decolua 9router vulnerable to authorization bypass

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes