npm

Everything Breach Observer has reported about npm: 2 stories, newest first. Part of our Vulnerabilities coverage.

09.10.2026
Vulnerabilities

Does Your App Pass Untrusted ASTs to Handlebars? Critical RCE Flaw Exposes Servers

A critical remote code execution vulnerability in Handlebars allows attackers to inject JavaScript via manipulated abstract syntax trees, bypassing recent safety checks.

09.10.2026
Vulnerabilities

Why must fast-jwt users upgrade to 6.3.0 to stop token forgery via CVE-2026-107723?

A high-severity flaw in fast-jwt permits signed JWTs with array payloads to skip expiry and issuer checks, risking token forgery in affected applications.