What’s Vulnerable › Products

cedar-policy authorization-for-expressjs vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your cedar-policy authorization-for-expressjs version is affected

Latest cedar-policy authorization-for-expressjs vulnerabilities

• CVE-2026-49473 — @cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation (CVSS 8.8)