@sap/cds-dk (>=6.8.0, <=6.8.3) potentially affected by CVE-2026-76969 via @sap/cds-mtxs (1.8.5)

@sap/cds-mtxs NPM version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on @sap/cds-mtxs and may be impacted: - @sap/cds-dk =6.8.0, =6.8.3 Source cves: CVE-2026-76969 Source advisory: GHSA-955M-RR6M-2F9V...

GHSA-955M-RR6M-2F9V @sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...

@sap/cds-mtx: Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...

@sap/cds-dk (>=6.8.0, <=6.8.3) potentially affected by CVE-2026-76969 via @sap/cds-mtxs (1.8.5)

@sap/cds-mtxs NPM version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on @sap/cds-mtxs and may be impacted: - @sap/cds-dk =6.8.0, =6.8.3 Source cves: CVE-2026-76969 Source advisory: OSV:GHSA-955M-RR6M-2F9V...

CVE-2026-76969

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...

@sap/cds-dk (>=6.8.0, <=6.8.3) potentially affected by CVE-2026-76969 via @sap/cds-mtxs (1.8.5)

@sap/cds-mtxs NPM version 1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on @sap/cds-mtxs and may be impacted: - @sap/cds-dk =6.8.0, =6.8.3 Source cves: CVE-2026-76969 Source advisory: MEND:CVE-2026-76969...

CVE-2026-76969 Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...

EUVD-2026-72586

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...

CVE-2026-76969

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...

CVE-2026-76969

The @sap/cds-mtxs NPM library used in SAP Cloud Application Programming Model (CAP) multitenant applications with extensibility enabled does not perform sufficient checks on certain functionality, allowing an unauthenticated attacker to send specially crafted requests to obtain sensitive credenti...

CVE-2026-76969 Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...

CVE-2026-76969: Insufficiently Protected Credentials

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...

PT-2026-86961

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled. An unauthenticated attacker could send specially crafted requests to obtain sensitive credentials and abuse them to replace or delete tenant data...