CVE-2026-124587

A vulnerability was identified in elizaOS eliza 2.0.3-beta.7. The affected element is an unknown function of the file packages/app/platforms/electrobun/src/lifecycle/api-base-owner.ts of the component HTTP Server. Such manipulation leads to information disclosure. It is possible to launch the...

@brainbase-ai/action-read (0.0.1), @brainbase-ai/actions (>=3.2.105, <=3.2.107) +71 more potentially affected by CVE-2026-26831 via textract (>=1.1.1, <=2.5.0)

textract NPM version =1.1.1, =3.2.105, =0.0.0, =0.0.0, =0.0.0, =0.0.15, =0.0.0, =0.0.0, =0.1.0, =1.0.0-beta.70, =0.1.1, =0.7.0, =0.0.1, =0.0.10 and more Source cves: CVE-2026-26831 Source advisory: SNYK:JS-TEXTRACT-15874118...