npm: node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions

Anonymous Write/Call Bypass via Unbound DefaultRolePermissions vulnerability discovered by ? in WordPress npm node-opcua-address-space versions = 2.42.0, 2.180.0...

@cbsanal/node-red-opcua-browse-subscribe (>=0.0.1, <=0.0.4), @frangoteam/fuxa (>=1.1.7, <=1.3.1) +58 more potentially affected by CVE-2026-95860 via node-opcua-address-space (>=2.42.0, <=2.179.0)

node-opcua-address-space NPM version =2.42.0, =0.0.1, =1.1.7, =1.1.19, =1.3.2-alpha.86, =1.4.15-alpha.218, =1.4.15-alpha.66, =1.4.15-alpha.183, =1.4.15-alpha.61, =1.3.6-alpha.36, =1.4.15-alpha.159, =1.3.5, =1.4.15-alpha.197, =1.4.15-alpha.279, =1.4.15-alpha.182, =1.4.15-alpha.196 and more Source...