What’s Vulnerable › Products

adonisjs http-server vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your adonisjs http-server version is affected

Latest adonisjs http-server vulnerabilities

• CVE-2026-104150 — AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity (CVSS 8.7)
• CVE-2026-107718 — AdonisJS: Unencoded route parameters can produce open redirects (CVSS 6.1)
• CVE-2026-61526 — AdonisJS HTTP Server is vulnerable to reflected XSS through its exception handler (CVSS 6.1)
• CVE-2026-40255 — @adonisjs/http-server has an Open Redirect vulnerability (CVSS 6.1)