Meet Corgea at Black Hat, BSides Las Vegas & DEF CON
Start for Free
npm

9router

View on npm registry
8 Total advisories
8 Vulnerabilities
0 Malware

Vulnerabilities

CRITICAL 10.0
npm

CVE-2026-59801

9router has unauthenticated CRUD on /api/providers and Full API Key Leak via /api/usage/stats
UNKNOWN
npm

CVE-2026-59800

9router: Missing Authorization and OS Command Injection
HIGH 7.3
npm

CVE-2026-55501

9router: Login brute-force protection bypass via spoofed X-Forwarded-For header
CRITICAL 9.9
npm

CVE-2026-55500

9routers has Exposure of Sensitive Information and Unprotected Database Import/Export, Allowing Complete Credential Theft and Database Takeover
HIGH 7.5
npm

CVE-2026-49353

9router has an Incomplete Fix: Local-Only Access Gate Bypass in 9router via Host Header SpoofING
CRITICAL 9.8
npm

CVE-2026-49352

9router's Hardcoded Default fallback JWT Secret Allows Authentication Bypass
CRITICAL 10.0
npm

CVE-2026-46339

9router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes
HIGH 7.3
npm

CVE-2026-5842

decolua 9router vulnerable to authorization bypass

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes