ROOT-APP-NPM-CVE-2026-27959 CVE-2026-27959 in @rootio/koa - Patched by Root

Root has patched CVE-2026-27959 in the @rootio/koa package for Root:npm. Multiple fixed versions available...

@aws/nx-plugin (>=0.44.0 <=0.84.2), @backstage/frontend-dynamic-feature-loader (>=0.0.0-nightly-20260213031600 <=0.1.11-next.2) +91 more potentially affected by CVE-2026-27959 via koa (>=3.0.0 <=3.1.1)

koa NPM version =3.0.0, =0.44.0, =0.0.0-nightly-20260213031600, =2025.12.1, =2.23.0, =0.0.1, =0.20.0, =2026.1.2, =2.0.0, =0.0.1, =0.22.0, =0.22.0, =3.10.0, =3.13.9-beta.2 - @equinor/roma-nx-plugin =4.0.0 - @fan-scripts/fan-mf-runtime =1.0.6 and more Source cves: CVE-2026-27959 Source advisory:...

CVE-2026-27959

creationtimestamp| type| source ---|---|--- 2026-02-26 04:24:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqe22kw3c26 2026-02-27 02:40:18+00:00| seen| https://gist.github.com/alon710/9c24edd6758ed34c527e00be66673a79 2026-02-28 15:40:09+00:00| seen|...