@haxtheweb/app-editor-hax (>=9.0.0-alpha.0, <=9.0.1), @haxtheweb/app-hax (>=9.0.19, <=25.0.0) +33 more potentially affected by CVE-2026-46396 via @haxtheweb/video-player (>=9.0.27, <=25.0.0)

@haxtheweb/video-player NPM version =9.0.27, =9.0.0-alpha.0, =9.0.19, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.19, =9.0.25, =9.0.20, =9.0.22, =9.0.22, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.0-alpha.0, =9.0.9, =0.0.0, =9.0.0-alpha.0, =25.0.0 and more Source cves: CVE-2026-46396 Source advisory:...

CVE-2026-46396

creationtimestamp| type| source ---|---|--- 2026-05-12 20:26:06+00:00| published-proof-of-concept| https://github.com/haxtheweb/issues/security/advisories/GHSA-jh3h-rpxg-fr36...